CVE-2026-86139

libxml2 before version 2.15.4 is affected by an integer overflow in the xmlURIEscapeStr function (uri.c). The vulnerability is rated CVSS 3.1 6.9 MEDIUM (AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L), indicating a local attack vector with high complexity but no privileges or user interaction required, pot...