← Database

CVE-2026-86141

LOW CVSS: 2.9 Published: 2026-09-05 Modified: 2026-09-15

Description

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.

Affected Platforms

Xmlsoft Libxml2

Weakness Type

CWE-252

References