CVE-2026-6653

CVE-2026-6653 affects GNOME libxml2, specifically the parser path libxml2’s xmlParseInternalSubset. The issue is a Use After Free in libxml2 versions 2.9.11 to 2.11.0, allowing a remote attacker to trigger a denial of service via carefully crafted XML input with improper entity resolution handlin...

CVE-2026-6653 libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the xmlParseInternalSubset function when processing specially crafted XML input with improper entity resolution handling. An attacker can cause the application to crash by supplying malicious XML data. Remediation...

CVE-2026-6653

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling...

CVE-2026-6653: Use After Free

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling...

PT-2026-51315

Name of the Vulnerable Software and Affected Versions libxml2 versions 2.9.11 through 2.11.0 Description A Use After Free issue exists in the xmlParseInternalSubset function of libxml2. This occurs due to improper entity resolution handling, which allows a remote attacker to cause a...

OSV-2023-242 Use-of-uninitialized-value in xmlSwitchEncoding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57431 Crash type: Use-of-uninitialized-value Crash state: xmlSwitchEncoding xmlParsePEReference xmlParseInternalSubset...

OSV-2023-212 Global-buffer-overflow in xmlParseEntityDecl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57294 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseEntityDecl xmlParseMarkupDecl xmlParseInternalSubset...