CVE-2026-86142

A flaw was found in libxml2. A local attacker could exploit a heap-based buffer overflow in the xmlXPtrEvalXPtrPart function. This vulnerability occurs due to an integer overflow when processing an oversized xpointer expression, leading to incorrect memory allocation and an out-of-bounds write...