CVE-2026-86137

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.15.4

Description The xmlFAParsePosCharGroup() function contains an out-of-bounds read, which also occurs within the NXT macro in xmlregexp. An out-of-bounds read is a condition where the software reads data past the end of the intended buffer, potentially leading to crashes or information disclosure.

Recommendations Update libxml2 to version 2.15.4 or later.