CVE-2026-86141

ADVISORY - nist

Summary

xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-252⁠

Unchecked Return Value

Impacted images

Advisories

NIST

CREATED

6 hours ago

UPDATED

6 hours ago

ADVISORY IDCVE-2026-86141⁠

EXPLOITABILITY SCORE

1.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-252⁠

CVSS SCORE

2.9low

Debian

CREATED

54 minutes ago

UPDATED

48 minutes ago

ADVISORY IDCVE-2026-86141⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY