Copyright © 2012 Red Hat, Inc. All rights reserved.
Low
2026-09-05T04:19:30
libxml2: libxml2: Denial of Service via out-of-bounds read in xmlFAParsePosCharGroup
2.9
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-125
In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
A flaw was found in libxml2. This out-of-bounds read vulnerability, specifically within the `xmlFAParsePosCharGroup` function, could allow an attacker to cause a denial of service. By processing specially crafted XML input, the affected component may attempt to read data beyond its allocated memory buffer, leading to application instability or crashes.
An out-of-bounds read in the libxml2 XML regular expression parser (xmlFAParsePosCharGroup) could allow a local attacker to cause a denial of service. The vulnerability carries a low impact rating due to its complex exploitation requirements and reliance on local access. This flaw is not present in any Red Hat products.
Red Hat Hardened Images
2026-09-06T00:00:00Z
RHSA-2026:64463
libxml2-main-2.15.4-0.1.hum1
Red Hat Enterprise Linux 10
Not affected
libxml2
Red Hat Enterprise Linux 10
Not affected
podman
Red Hat Enterprise Linux 6
Not affected
libxml2
Red Hat Enterprise Linux 7
Not affected
libxml2
Red Hat Enterprise Linux 8
Not affected
container-tools:rhel8/podman
Red Hat Enterprise Linux 8
Not affected
libxml2
Red Hat Enterprise Linux 9
Not affected
libxml2
Red Hat Enterprise Linux 9
Not affected
podman
Red Hat Hardened Images
Not affected
swift-lang
Red Hat OpenShift Container Platform 4
Not affected
openshift/ose-rhel-coreos-8
Red Hat OpenShift Container Platform 4
Not affected
openshift/ose-rhel-coreos-9
Red Hat OpenShift Container Platform 4
Not affected
podman
https://www.cve.org/CVERecord?id=CVE-2026-86137
https://nvd.nist.gov/vuln/detail/CVE-2026-86137
https://github.com/GNOME/libxml2/commit/76fe08d97de88bfaef2f7d5cd27f11954cc5bee2
https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4
https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1099