PT-2026-86303
CVE-2026-86142
·
تاريخ النشر
2026-09-05
·
تاريخ التحديث
2026-10-23
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
libxml2 versions prior to 2.15.4
Description
A heap-based buffer overflow occurs in the
xmlXPtrEvalXPtrPart() function due to xpointer length saturation within xmlXPtrEval. A heap-based buffer overflow is a memory corruption issue where a program writes more data to a heap-allocated buffer than it can hold, potentially leading to crashes or arbitrary code execution.Recommendations
Update libxml2 to version 2.15.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾