Xmlsoft - vulnerabilities (CVEs)
143 CVEs in 4 products, 0 in the last 30 days, newest from 2026-09-05.
Products
Newest CVEs of Xmlsoft
- CVE-2026-86144 - CVSS 7.8 (high), 2026-09-05: In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example,…
- CVE-2026-86143 - CVSS 7.3 (high), 2026-09-05: In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a…
- CVE-2026-86142 - CVSS 7.8 (high), 2026-09-05: In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.
- CVE-2026-86141 - CVSS 3.3 (low), 2026-09-05: xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length…
- CVE-2026-86140 - CVSS 8 (high), 2026-09-05: In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
- CVE-2026-86139 - CVSS 7.8 (high), 2026-09-05: In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.
- CVE-2026-86138 - CVSS 7.8 (high), 2026-09-05: In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.
- CVE-2026-86137 - CVSS 6.1 (medium), 2026-09-05: In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
- CVE-2026-11979 - CVSS 7.8 (high), 2026-06-29: libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell() function processes user…
- CVE-2026-6653 - CVSS 9.8 (critical), 2026-06-22: Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via…
- CVE-2026-6732 - CVSS 7.5 (high), 2026-04-23: A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that…
- CVE-2026-0989 - CVSS 3.7 (low), 2026-01-15: A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion…
- CVE-2026-0992 - CVSS 2.9 (low), 2026-01-15: A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated…
- CVE-2026-0990 - CVSS 5.9 (medium), 2026-01-15: A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML…
- CVE-2025-9714 - CVSS 6.2 (medium), 2025-09-10: Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted…
- CVE-2025-8732 - CVSS 4.8 (medium), 2025-08-08: A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the…
- CVE-2025-7424 - CVSS 7.5 (high), 2025-07-10: A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML…
- CVE-2025-6170 - CVSS 2.5 (low), 2025-06-16: A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program…
- CVE-2025-6021 - CVSS 7.5 (high), 2025-06-12: A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This…
- CVE-2025-32415 - CVSS 7.5 (high), 2025-04-17: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted…
- CVE-2025-32414 - CVSS 7.5 (high), 2025-04-08: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return…
- CVE-2025-24855 - CVSS 7.8 (high), 2025-03-14: numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This…
- CVE-2024-55549 - CVSS 7.8 (high), 2025-03-14: xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
- CVE-2025-27113 - CVSS 7.5 (high), 2025-02-18: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
- CVE-2025-24928 - CVSS 7.8 (high), 2025-02-18: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must…
- CVE-2024-56171 - CVSS 9.8 (critical), 2025-02-18: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To…
- CVE-2022-49043 - CVSS 8.1 (high), 2025-01-26: xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
- CVE-2024-40896 - CVSS 9.1 (critical), 2024-12-23: In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers…
- CVE-2024-34459 - CVSS 7.5 (high), 2024-05-14: An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a…
- CVE-2024-25062 - CVSS 7.5 (high), 2024-02-04: An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion…
