Home
Packages
Vulnerabilities
Vendors
Report
Policy
Login
Signup
« List of all CVEs
CVE-2026-86140
Published:
9/5/2026
Last updated:
9/8/2026
Reserved:
9/5/2026
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
CNA assigner:
mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca)
Requested by:
n/a
Metrics
Version
Score
Severity
Vector String
3.1
8
High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Opam packages affected (5)
bap-llvm
conf-gtksourceview
conf-gtksourceview3
conf-librsvg2
lablgtk3-gtkspell3
Products affected (0)
No product listed.
References (2)
https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4
https://github.com/GNOME/libxml2/commit/d1686f91dbda141a752200419d35639fd6b38340