CVE-2026-86143

libxml2 versions before 2.15.4 contain an integer overflow flaw in the xmlIO component. An inconsistency between xmlOutputWriteCallback and xmlBufUse allows negative lengths to reach write callbacks due to a missing overflow check before invoking the callback. The security impact depends on how t...

CVE-2026-86143

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a...

EUVD-2026-71822

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a...