TI-2026-52582 CVE-2026-74860 · GHSA-8626-cqqj-mfff
Libxml2: double-free/uaf in libxml2 python bindings
Priority MEDIUM 40
A flaw was found in libxml2 with Python bindings enabled.
RHSA-2026:92589
libxml2 security, bug fix, and enhancement update
Released 2026-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) libxml2-devel-2.9.7-13.el8_6.24
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) libxml2-devel-2.9.7-13.el8_6.24
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) libxml2-2.9.7-13.el8_6.24, python3-libxml2-2.9.7-13.el8_6.24
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) libxml2-2.9.7-13.el8_6.24, python3-libxml2-2.9.7-13.el8_6.24
Fixes 8 records
TI-2026-58934 CVE-2026-86140 · GHSA-6wmc-mmch-49h7
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
Priority LOW 36
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
TI-2026-58936 CVE-2026-86142 · GHSA-499q-6rmh-w6p7
Heap-based buffer overflow in xmlsoft libxml2
Priority LOW 35
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.
TI-2026-58938 CVE-2026-86144 · GHSA-h6w8-m27h-f268
In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do…
Priority LOW 33
In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags.
TI-2026-58937 CVE-2026-86143 · GHSA-r2q6-6v35-773j
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and…
Priority LOW 33
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback.
TI-2026-58932 CVE-2026-86138 · GHSA-v4gg-2cxp-fc23
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.
Priority LOW 33
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.
TI-2026-05839 CVE-2026-6653 · GHSA-v4qw-p44r-qhfg
libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling
Priority LOW 31
Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handl…
TI-2026-10322 CVE-2026-11979 · GHSA-h67q-h62w-5mjr
Stack-Based Buffer Overflow in libxml2
Priority LOW 9
libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode.