CVE-2026-86139

A flaw was found in libxml2. An integer overflow vulnerability exists in the xmlURIEscapeStr function within uri.c. This flaw could potentially lead to memory corruption, allowing an attacker to achieve information disclosure or arbitrary code execution. Mitigation To mitigate this developers mus...

libxml2: libxml2: Integer overflow in xmlURIEscapeStr may lead to arbitrary code execution

A flaw was found in libxml2. An integer overflow vulnerability exists in the xmlURIEscapeStr function within uri.c. This flaw could potentially lead to memory corruption, allowing an attacker to achieve information disclosure or arbitrary code execution...

AZL-99714 CVE-2026-86139 affecting package libxml2 2.11.5-10

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

UBUNTU-CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

EUVD-2026-71832

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

CVE-2026-86139

libxml2 before 2.15.4 contains an integer overflow in the xmlURIEscapeStr function within uri.c. The upstream fix (commit 8edbbdb0) adds a zero-length guard after xmlStrlen to catch cases where the function returns 0 for a non-empty input, preventing the overflow. According to Red Hat, the flaw c...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

CVE-2026-86139

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the xmlURIEscapeStr function. An attacker can execute arbitrary code or access sensitive information by triggering an integer overflow that results in memory corruption. Remediation Upgrade libxml2 to...

PT-2026-91913

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

CVE-2026-86139: Integer Overflow or Wraparound

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

PT-2026-86300

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.15.4 Description An integer overflow exists in the xmlURIEscapeStr function within the uri.c file. An integer overflow occurs when an arithmetic operation results in a value that exceeds the maximum size of the...

Linux Distros Unpatched Vulnerability : CVE-2026-86139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. CVE-2026-86139 Note that Nessus relies on the presence of the package as reported by...