CVE-2026-86142

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.15.4

Description A heap-based buffer overflow occurs in the xmlXPtrEvalXPtrPart() function due to xpointer length saturation within xmlXPtrEval. A heap-based buffer overflow is a memory corruption issue where a program writes more data to a heap-allocated buffer than it can hold, potentially leading to crashes or arbitrary code execution.

Recommendations Update libxml2 to version 2.15.4 or later.