Threat Intelligence Database

Technology Preview features are not fully supported, may not be functionally complete, and are not suitable for deployment in production.

A heap-based buffer overflow vulnerability exists in the libxml2 library's xmlXPtrEval function due to xpointer length saturation (CVE-2026-86142). This vulnerability affects Red Hat Enterprise Linux 8 across multiple architectures. Red Hat has issued a security advisory with an update to address this moderate severity issue. The advisory provides updated libxml2 packages to fix the flaw.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to multiple libxml2 packages. The advisory addresses several CVEs related to these packages and provides a bug fix and enhancement update for libxml2 version 2.15.4-0.1.hum1 on aarch64 and x86_64 architectures. No specific exploit details or CVSS scores are provided. Users are directed to apply the update as detailed on Red Hat's official site.

This bugfix update provides a functional equivalent of RHBA-2025:6597. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHBA-2025:6597.

A use-after-free vulnerability (CWE-416) exists in the XMLReader component of the libxml2 library, tracked as CVE-2024-25062. This vulnerability affects multiple versions of Red Hat Enterprise Linux 8 and 9 across various architectures. Exploitation could lead to memory corruption or application crashes. Red Hat has released security updates to address this issue and recommends applying these updates and restarting the desktop session for the fix to take effect. The severity is rated as moderate.