Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-26434 EUVD-2025-27009GHSA-9wrc-g27x-wrww

In libxml2, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additi…

Published Sep 5, 2025 · Updated Sep 5, 2025 · Assigned by google_android

Description

In libxml2, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 16 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Red Hat Hardened Images 1 libxml2 +4 2.15.2-0.3.hum1 RHSA-2026:7519

Advisories 1

References