Libxml2 · Libxml2 · CVE-2026-76781
**Name of the Vulnerable Software and Affected Versions**
libxml2 (affected versions not specified)
**Description**
A flaw in the XML catalog parsing process allows a local user or an attacker to trigger a NULL pointer dereference by providing a specially crafted XML catalog. This occurs when a `nextCatalog` element is missing its mandatory `catalog` attribute, resulting in an application crash and a Denial of Service (DoS).
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.