TI-2026-52582 CVE-2026-74860 · GHSA-8626-cqqj-mfff
Libxml2: double-free/uaf in libxml2 python bindings
Priority MEDIUM 40
A flaw was found in libxml2 with Python bindings enabled.
RHSA-2026:64463
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-09-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images libxml2-16-2.15.4-0.1.hum1@aarch64, libxml2-16-2.15.4-0.1.hum1@x86_64, libxml2-2.15.4-0.1.hum1@aarch64 +8
Fixes 9 records
TI-2026-58934 CVE-2026-86140 · GHSA-6wmc-mmch-49h7
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
Priority LOW 36
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
TI-2026-58936 CVE-2026-86142 · GHSA-499q-6rmh-w6p7
Heap-based buffer overflow in xmlsoft libxml2
Priority LOW 35
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.
TI-2026-58933 CVE-2026-86139 · GHSA-xvw4-gjw8-rw38
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.
Priority LOW 35
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.
TI-2026-58938 CVE-2026-86144 · GHSA-h6w8-m27h-f268
In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do…
Priority LOW 33
In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags.
TI-2026-58937 CVE-2026-86143 · GHSA-r2q6-6v35-773j
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and…
Priority LOW 33
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback.
TI-2026-58932 CVE-2026-86138 · GHSA-v4gg-2cxp-fc23
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.
Priority LOW 33
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.
TI-2026-58931 CVE-2026-86137 · GHSA-cq7w-3xjv-g47g
Out-of-bounds read in xmlsoft libxml2
Priority LOW 27
In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
TI-2026-58935 CVE-2026-86141 · GHSA-7g6w-jj32-qj92
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt…
Priority LOW 15
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.