CVE-2026-86141 xmlregexp in libxml2 before 2.15.4 has a NULL pointer… — CVE Notify — TG.ME

CVCVE Notify@cveNotify · 19.7K subscribersOpen in TelegramOpen

🚨 CVE-2026-86141
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.

🎖@cveNotify

GitHub

xmlregexp: Calc string length after null checking · GNOME/libxml2@e89a8aa

Fix https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1107

t.me/cveNotify/286174

September 5, 2026 35