medium6.9
CVE-2026-86139
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.
Impact
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xmlsoft | Libxml2 | before 2.15.4 |