Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-86142

Опубликовано: 05 сент. 2026
Источник: debian
EPSS Низкий

Описание

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libxml2fixed2.15.4+dfsg-1package

Примечания

  • https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1113

  • Fixed by: https://gitlab.gnome.org/GNOME/libxml2/-/commit/6b3a736c0edc74ceec3d82f5252499d7911b3a58 (v2.15.4)

EPSS

Процентиль: 3%
0.00132
Низкий

Связанные уязвимости

CVSS3: 6.9
ubuntu
9 дней назад

(In libxml2 before 2.15.4, there is a heap-based buffer overflow in xml ...)

CVSS3: 6.9
redhat
11 дней назад

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

CVSS3: 6.9
nvd
11 дней назад

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

msrc
9 дней назад

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

CVSS3: 6.9
github
11 дней назад

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

EPSS

Процентиль: 3%
0.00132
Низкий