CVE-2026-86138

A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...

CVE-2026-86140

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited. Mitigation T...

CVE-2026-86143

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteC...

UBUNTU-CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer over...

Slackware Linux 15.0 libxml2 Vulnerability (SSA:2026-249-02)

The version of libxml2 installed on the remote host is prior to 2.11.9. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-249-02 advisory. New libxml2 packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the preceding description block...

CVE-2026-86144

In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXInclu...

CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in x...

CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat...

UBUNTU-CVE-2026-86141

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in x...

UBUNTU-CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat...

CVE-2026-86137

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer over...

UBUNTU-CVE-2026-86142

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xml...

UBUNTU-CVE-2026-86137

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds...

UBUNTU-CVE-2026-86143

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteC...

UBUNTU-CVE-2026-86144

In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXInclu...

CVE-2015-8710

Reproducer Kudos to Mike Dalessio, Francois Chagnon, Florian Weingarten and Jun Kokatsu. See BZ 746048 Building on Linux root@kitploit: $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2...

libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow

A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...

libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...

libxml2: libxml2: Integer overflow in xmlURIEscapeStr may lead to arbitrary code execution

A flaw was found in libxml2. An integer overflow vulnerability exists in the xmlURIEscapeStr function within uri.c. This flaw could potentially lead to memory corruption, allowing an attacker to achieve information disclosure or arbitrary code execution...