7865 matches found
CVE-2026-86140
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...
CVE-2026-86140
CVE-2026-86140 affects libxml2 versions prior to 2.15.4 . The vulnerability resides in the xmlSnprintfElements function within valid.c , where a strcat call causes a stack-based buffer overflow . The CVSS 3.1 score is 8.0 (HIGH) with a local attack vector, low complexity, and no privileges or use...
EUVD-2026-71833
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...
Buffer Overflow
Overview Affected versions of this package are vulnerable to Buffer Overflow via the xmlSnprintfElements function. An attacker can execute arbitrary code or cause a denial of service by supplying specially crafted input that triggers a stack-based buffer overflow. Remediation Upgrade libxml2 to...
CVE-2026-86140
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...
CVE-2026-86140
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...
CVE-2026-86140
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...
CVE-2026-86140
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...
CVE-2026-86139
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...
CVE-2026-86139
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...
CVE-2026-86139
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...
CVE-2026-86139
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...
EUVD-2026-71832
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...
CVE-2026-86139
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...
CVE-2026-86139
libxml2 before 2.15.4 contains an integer overflow in the xmlURIEscapeStr function within uri.c. The upstream fix (commit 8edbbdb0) adds a zero-length guard after xmlStrlen to catch cases where the function returns 0 for a non-empty input, preventing the overflow. According to Red Hat, the flaw c...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the xmlURIEscapeStr function. An attacker can execute arbitrary code or access sensitive information by triggering an integer overflow that results in memory corruption. Remediation Upgrade libxml2 to...
CVE-2026-86138
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
CVE-2026-86138
CVE-2026-86138 affects libxml2 before version 2.15.4 . The root cause is an integer overflow in the xmlDictAddQString function (dict.c), which results in a heap-based buffer overflow . A local attacker can leverage this to execute arbitrary code , compromising system integrity and confidentiality...