CVE-2026-11979

libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function processes user input using fixed-size stack buffers without proper bounds checking. By supplying an overly long input line, an attacker can overflow intern...

CVE-2026-11979

Affected software: libxml2 (xmlcatalog utility). Vulnerability details: Stack-based buffer overflows in the usershell() input handling when xmlcatalog runs in --shell mode. Fixed-size stack buffers are used without proper bounds checking, allowing an overly long input line to overflow buffers (co...