Low severity2.9OSV Advisory· Published Sep 5, 2026· Updated Sep 8, 2026
CVE-2026-86137
CVE-2026-86137
Description
In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
Affected products
2- Range: v2.15.3, v2.15.2, v2.15.1, …
- Range: <2.15.4
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.