← All advisories

High severity8.0NVD Advisory· Published Sep 5, 2026· Updated Sep 15, 2026

CVE-2026-86140

CVE-2026-86140

Description

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

GNOME Foundation/Libxml2llm-fuzzy
Range: <2.15.4
osv-coords4 versions
pkg:rpm/almalinux/libxml2 pkg:rpm/almalinux/python3-libxml2 pkg:rpm/almalinux/libxml2-static pkg:rpm/almalinux/libxml2-devel
< 2.9.13-14.el9_8.5+ 3 more
- (no CPE)range: < 2.9.13-14.el9_8.5
- (no CPE)range: < 2.9.13-14.el9_8.5
- (no CPE)range: < 2.12.5-10.el10_2.4
- (no CPE)range: < 2.9.13-14.el9_8.5

Patches

Vulnerability mechanics

References

2

github.com/GNOME/libxml2/commit/d1686f91dbda141a752200419d35639fd6b38340nvdPatch
github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4nvdRelease Notes

News mentions

0

No linked articles in our index yet.