EUVD-2026-117647

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-character element, attribute, DOCTYPE or entity name ending in a...

CVE-2026-123202 libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-character element, attribute, DOCTYPE or entity name ending in a...

CVE-2026-123202 libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-character element, attribute, DOCTYPE or entity name ending in a...

CVE-2026-123202

The libnxml library before version 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxml_parser.c. A remote attacker can trigger the overflow by providing XML or RSS feeds with element, attribute, DOCTYPE, or entity names of 1022 characters ending in a multi-byte UTF-8 character...