Summary
It was discovered that libxml2 incorrectly handled certain XML elements
under certain circumstances. An attacker could possibly use this issue to
cause libxml2 to crash or execute arbitrary code. (CVE-2026-86140)
It was discovered that libxml2 incorrectly handled certain XML documents
when used with Python bindings. A remote attacker could possibly use this
issue to cause applications using libxml2 to crash, resulting in a denial
of service. (CVE-2026-74860)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libxml2 | 2.9.13+dfsg-1ubuntu0.13 |
| Ubuntu · 24.04 LTS 24.04:LTS | libxml2 | 2.9.14+dfsg-1.3ubuntu3.9 |
| Ubuntu · 26.04 LTS 26.04:LTS | libxml2 | 2.15.2+dfsg-0.1ubuntu0.2 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libxml2 | 2.9.1+dfsg1-3ubuntu4.13+esm12 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm13 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.9+esm8 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.10+esm5 |
Vulnerabilities 2
-
High 8.5
Libxml2: double-free/uaf in libxml2 python bindings
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-fre…
-
High 8.0
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.