CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat...

CVE-2026-86140

CVE-2026-86140 affects libxml2 versions prior to 2.15.4 . The vulnerability resides in the xmlSnprintfElements function within valid.c , where a strcat call causes a stack-based buffer overflow . The CVSS 3.1 score is 8.0 (HIGH) with a local attack vector, low complexity, and no privileges or use...

EUVD-2026-71833

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...

CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...

CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer over...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

CVE-2026-86139

libxml2 before version 2.15.4 is affected by an integer overflow in the xmlURIEscapeStr function (uri.c). The vulnerability is rated CVSS 3.1 6.9 MEDIUM (AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L), indicating a local attack vector with high complexity but no privileges or user interaction required, pot...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

EUVD-2026-71832

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

CVE-2026-86138

libxml2 before 2.15.4 is affected by an integer overflow in xmlDictAddQString (dict.c), which leads to a heap-based buffer overflow . The vulnerability requires a local attack with high complexity , no privileges, and no user interaction, yet can result in high confidentiality and integrity impac...

CVE-2026-86138

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...

CVE-2026-86138

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer o...

EUVD-2026-71831

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...

EUVD-2026-71830

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp...

CVE-2026-86137

libxml2 before 2.15.4 contains an out-of-bounds read in the xmlFAParsePosCharGroup function, specifically within the NXT macro of the xmlregexp module. This flaw can lead to a limited availability impact (potential crash), though the overall severity is rated LOW (CVSS 3.1 base score 2.9) due to ...

CVE-2026-86137

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp...

CVE-2026-86137

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.11.9-i586-10slack15.0.txz: Rebuilt. This update fixes bugs and security issues: xmlregexp: Prevent out-of-bounds read in NX...

PT-2026-86304

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a...