An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode while parsing crafted a XML file performs incorrect memory handling leading to a heap-based buffer over-read in the \normalize line endings\ feature.