Medium severity6.9OSV Advisory· Published Sep 5, 2026· Updated Sep 8, 2026
CVE-2026-86142
CVE-2026-86142
Description
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.
Affected products
2- Range: v2.15.3, v2.15.2, v2.15.1, …
- Range: <2.15.4
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.