CVE-2026-86140

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.15.4

Description A stack-based buffer overflow exists in the xmlSnprintfElements() function within the valid.c file. The issue occurs because the function uses strcat() to build element strings into a fixed-size stack buffer. An attacker can provide specially crafted XML to trigger the validation path, leading to memory corruption, which may result in remote code execution or a denial of service.

Recommendations Update libxml2 to version 2.15.4.