Description
A malicious server and possibly even a malicious remote user could create a carefully crafted XMPP message that causes libpurple to send an XMPP message containing arbitrary memory.
Mitigation
Correctly determine the start and end position of buffers when performing stringprep.