Threats Tagged 'cve-2026-86140'

A security update addresses an out-of-bounds read and write vulnerability in the libpcap library, which is used for low-level network monitoring. This vulnerability (CVE-2026-0799) allows arbitrary memory access. The issue affects multiple Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products across various architectures. Red Hat has released an important security advisory with updated libpcap packages to fix this vulnerability.

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow (CVE-2026-86138) * libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks (CVE-2026-86143) * libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements (CVE-2026-86140) * libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation. (CVE-2026-86144) * libxml2: double-free/UAF in libxml2 Python bindings (CVE-2026-74860) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to multiple libxml2 packages. The advisory addresses several CVEs related to these packages and provides a bug fix and enhancement update for libxml2 version 2.15.4-0.1.hum1 on aarch64 and x86_64 architectures. No specific exploit details or CVSS scores are provided. Users are directed to apply the update as detailed on Red Hat's official site.

A stack-based buffer overflow vulnerability exists in libxml2 versions before 2.15.4 in the xmlSnprintfElements function within valid.c. This flaw involves the use of strcat, which can lead to memory corruption. The vulnerability has a high severity with a CVSS score of 8.0 and impacts confidentiality, integrity, and availability.