Summary
It was discovered that libxml2 did not properly release memory allocated in
the xmllint utility. An attacker could possibly use this issue to cause a
denial of service. (CVE-2026-1757)
A type confusion vulnerability was found in libxml2 when processing a
specially crafted XML document. A remote attacker could possibly use this
issue to cause a denial of service. (CVE-2026-6732)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 25.10 | libxml2 | 2.14.5+dfsg-0.2ubuntu0.2 |
| Ubuntu · 26.04 LTS 26.04:LTS | libxml2 | 2.15.2+dfsg-0.1ubuntu0.1 |
Vulnerabilities 2
-
Medium 6.5
Libxml2: libxml2: denial of service via crafted xsd-validated document
A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, …
-
Medium 6.2
Libxml2: memory leak leading to local denial of service in xmllint interactive shell
A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program s…