← All advisories

Medium severity6.9OSV Advisory· Published Sep 5, 2026· Updated Sep 15, 2026

CVE-2026-86142

CVE-2026-86142

Description

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

NetApp/Clustered Data OntapOSV
Range: v2.15.3, v2.15.2, v2.15.1, …
GNOME Foundation/Libxml2llm-fuzzy
Range: <2.15.4
osv-coords4 versions
pkg:rpm/almalinux/libxml2 pkg:rpm/almalinux/libxml2-devel pkg:rpm/almalinux/libxml2-static pkg:rpm/almalinux/python3-libxml2
< 2.9.13-14.el9_8.5+ 3 more
- (no CPE)range: < 2.9.13-14.el9_8.5
- (no CPE)range: < 2.9.13-14.el9_8.5
- (no CPE)range: < 2.12.5-10.el10_2.4
- (no CPE)range: < 2.9.13-14.el9_8.5

Patches

Vulnerability mechanics

References

2

github.com/GNOME/libxml2/commit/6b3a736c0edc74ceec3d82f5252499d7911b3a58nvdPatch
github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4nvdRelease Notes

News mentions

0

No linked articles in our index yet.