CVE-2026-86141
Fixed in a distro release EPSS <1%CVSS 2.9
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.
Products: xmlsoft libxml2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 13 | libxml2 | no fix |
| Debian 14 | libxml2 | 2.15.4+dfsg-1 |
| Red Hat hummingbird 1 | libxml2 | 0:2.15.4-0.1.hum1 |
| Red Hat hummingbird 1 | libxml2-16 | 0:2.15.4-0.1.hum1 |
| Red Hat hummingbird 1 | libxml2-devel | 0:2.15.4-0.1.hum1 |
| Red Hat hummingbird 1 | libxml2-static | 0:2.15.4-0.1.hum1 |
| Red Hat hummingbird 1 | python3-libxml2 | 0:2.15.4-0.1.hum1 |