← CVE Intelligence

CVE-2026-74860

Libxml2: double-free/uaf in libxml2 python bindings PUBLISHED

Description (CNA)

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:2.12.5-10.el10_2.4 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.9.7-21.el8_10.9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.9.7-21.el8_10.9 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.9.13-14.el9_8.5 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.9.13-14.el9_8.5 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589912 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589914 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589855 before *
Red Hat / Red Hat Cost Management On-Premise 1unaffected 1791460851 before *
Red Hat / Red Hat Hardened Imagesunaffected 2.15.4-0.1.hum1 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1791978534 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1791978528 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1791978528 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1791964013 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1791978693 before *
Red Hat / Red Hat Enterprise Linux 10unaffected
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat Enterprise Linux 8unaffected
Red Hat / Red Hat Enterprise Linux 9unaffected
Red Hat / Red Hat Hardened Imagesunaffected
Red Hat / Red Hat OpenShift Container Platform 4unaffected
Red Hat / Red Hat OpenShift Container Platform 4unaffected
Red Hat / Red Hat OpenShift Container Platform 4unaffected

CWE

CWE-763

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.