CVE-2026-86143 In xmlIO in libxml2 before 2.15.4, an inconsistency in… — CVE Notify — TG.ME

CVCVE Notify@cvenotify · 19.7K subscribersOpen in TelegramOpen

🚨 CVE-2026-86143
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.

🎖@cveNotify

GitHub

xmlIO: Check for int overflow before calling writecallback · GNOME/libxml2@90f293b

Fix https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1111

t.me/cvenotify/286176

September 5, 2026 47