DeutschShown in its original language — a full translation is planned for a future version.
libxml2: Mehrere Schwachstellen
view advisory published 2026-09-06
Ein Angreifer kann mehrere Schwachstellen in libxml2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Daten zu manipulieren oder offenzulegen und um einen Denial of Service herbeizuführen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-86144US | high7.8 | — | ||
In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET f… | ||||
| CVE-2026-86143US | high7.3 | — | ||
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer over… | ||||
| CVE-2026-86142US | high7.8 | — | ||
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation. | ||||
| CVE-2026-86141US | low3.3 | — | ||
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking. | ||||
| CVE-2026-86140US | high7.8 | — | ||
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. | ||||
| CVE-2026-86139US | high7.8 | — | ||
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. | ||||
| CVE-2026-86138US | high7.8 | — | ||
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. | ||||
| CVE-2026-86137US | medium6.1 | — | ||
In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:71585 vom 2026-09-24external
- Red Hat Security Advisory RHSA-2026:71586 vom 2026-09-24external
- Red Hat Security Advisory RHSA-2026:71641 vom 2026-09-24external
- Red Hat Security Advisory RHSA-2026:79357 vom 2026-10-08external
- Red Hat Security Advisory RHSA-2026:80675 vom 2026-10-12external
- Red Hat Security Advisory RHSA-2026:89750 vom 2026-10-26external
- Red Hat Security Advisory RHSA-2026:89759 vom 2026-10-26external
- Red Hat Security Advisory RHSA-2026:90309 vom 2026-10-26external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan