CVE-2026-86139

libxml2 before version 2.15.4 is affected by an integer overflow in the xmlURIEscapeStr function (uri.c). The vulnerability is rated CVSS 3.1 6.9 MEDIUM (AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L), indicating a local attack vector with high complexity but no privileges or user interaction required, pot...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

EUVD-2026-71832

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

PT-2026-86300

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

Astra Linux – Vulnerability in libxml2

The vulnerability of the xmlBuildRelativeURI function in the uri.c component of the Libxml2 library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to cause service failures remotely...