An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-2640.json"