A flaw in libxml2's XML catalog parsing allows a NULL pointer dereference when a nextCatalog element is missing its required catalog attribute. This leads to an application crash and denial of service. The vulnerability requires an attacker or local user to provide a specially crafted XML catalog that is processed by an application using libxml2. The attack surface is limited to scenarios where malicious XML input is accepted. The CVSS v3.1 score is 5.5 (medium severity) with an attack vector of local, low complexity, no privileges required, but user interaction is necessary. The vulnerability does not impact confidentiality or integrity but causes high availability impact.

The vulnerability causes a denial of service by crashing applications that parse malicious XML catalogs with missing catalog attributes in nextCatalog elements. There is no impact on confidentiality or integrity. Exploitation requires user interaction and the ability to supply crafted XML input to a vulnerable application. No known exploits are reported in the wild.

Red Hat advises avoiding processing untrusted XML catalog files with applications linked against libxml2. Users should exercise caution when opening or processing XML documents from untrusted sources. Where possible, restrict applications from loading external XML catalogs or ensure only trusted catalog files are used. The vendor advisory does not explicitly state that a patch is available; therefore, patch status is not yet confirmed—check the Red Hat advisory for updates.