A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An att…
Medium CVSS 6.5
Summary
A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
- :
Sources
- NVD DATABASE
Original Links
- https://access.redhat.com/errata/RHSA-2026:11503 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-6732 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2461300 Issue Tracking
- https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097 Exploit
- https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411 Issue Tracking
Timeline
- nvd_ingest NVD