CVE-2026-86139 In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow

Description

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
libxml2 2.15	premières → < 2.15.4	2.15.4

Autres CVE de libxml2

Les 15 CVE de libxml2 →

CVE-2026-86144 In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags 5.6 Moyenne CVE-2026-86143 In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to… 6.9 Moyenne CVE-2026-86142 In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer… 6.9 Moyenne CVE-2026-86141 xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e.,… 2.9 Faible