CVE-2026-86140 In libxml2 before 2.15.4, xmlSnprintfElements in… — CVE Notify — TG.ME

CVE Notify@cvenotify · 19.7K subscribers Open in TelegramOpen

🚨 CVE-2026-86140
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.

🎖@cveNotify

fix: add bounds checks to xmlSnprintfElements in valid.c · GNOME/libxml2@d1686f9

CVE-2025-24928 fixed xmlSnprintfElementContent for unchecked strcat() writes, but the sibling function xmlSnprintfElements has the identical unfixed pattern. The strcat(buf, "(") ...

t.me/cvenotify/286173

September 5, 2026 26