Low severity2.9OSV Advisory· Published Sep 5, 2026· Updated Sep 8, 2026
CVE-2026-86141
CVE-2026-86141
Description
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.
Affected products
2- Range: v2.15.3, v2.15.2, v2.15.1, …
- Range: <2.15.4
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.