Product · xmlsoft

libxml2

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

High 8.0

CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.

xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu

Sep 5, 2026
High 7.8

CVE-2024-56171

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleI…

xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Alpine

Feb 18, 2025
High 7.8

CVE-2025-24928

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To…

xmlsoft libxml2 qt6-qtwebengine libxml2 Debian Ubuntu Alpine

Feb 18, 2025
High 8.1

CVE-2022-49043

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu

Jan 26, 2025