← Database

CVE-2026-76781

MEDIUM CVSS: 5.5 Published: 2026-09-17 Modified: 2026-09-18

Description

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a `nextCatalog` element lacks its mandatory `catalog` attribute, leading to the application crashing and causing a Denial of Service (DoS).

Affected Platforms

Unknown

Weakness Type

CWE-476

References