CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

1 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-86143 High · 7.3 CWE-192 Sep 5, 2026
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and…
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.