CVE-2015-8035

Summary (CVE-2015-8035) : In libxml2, the xz_decomp function in xzlib.c does not properly detect compression errors, enabling a denial-of-service condition (process hang) via crafted XML data. Affected: libxml2 up to 2.9.1 (and related 2.9.x lines in later advisories) with potential impact across...

CVE-2025-6170

CVE-2025-6170 affects libxml2’s xmllint interactive shell. A stack-based buffer overflow in the command-parsing logic can cause crashes and, in rare configurations, may allow code execution. Related connected documents show patches/updates across distributions: Debian LTS advisory and Debian secu...

CVE-2026-0992

CVE-2026-0992 in libxml2 describes an uncontrolled resource consumption vulnerability. A remote attacker can supply crafted XML catalogs containing repeated elements pointing to the same downstream catalog, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU us...