CVE-2026-86142

Publication date 5 September 2026

Last updated 8 October 2026

Ubuntu priority

Cvss 3 Severity Score

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

Show unmaintained releases

Package	Ubuntu Release	Status

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details

CVSS version: CVSS v3.0

Base score 6.9 · Medium

Base metrics

Scores

Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L