Known vulnerabilities in Libxml2 2.9.4-16-g0741801

Software: Libxml2
Version: 2.9.4-16-g0741801
Software CPE: cpe:2.3:a:gnome:libxml2:*:*:*:*:*:*:*:*
Total vulnerabilities: 37
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Libxml2 version 2.9.4-16-g0741801 Libxml2 2.9.4-16-g0741801 is affected by 37 vulnerabilities: 13 high, 19 medium, 5 low Critical High Medium Low

Vulnerabilities (37)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147361 - Integer overflow
CVE-2026-86143
CWE-190 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147362 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-86144
CWE-611 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147357 - Integer overflow
CVE-2026-86139
CWE-190 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147358 - Stack-based buffer overflow
CVE-2026-86140
CWE-121 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147359 - NULL Pointer Dereference
CVE-2026-86141
CWE-476 Low
No
No
2.15.4 08.09.2026 SB2026090826
#VU147360 - Heap-based Buffer Overflow
CVE-2026-86142
CWE-122 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147355 - Out-of-bounds read
CVE-2026-86137
CWE-125 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU147356 - Heap-based Buffer Overflow
CVE-2026-86138
CWE-122 Medium
No
No
2.15.4 08.09.2026 SB2026090826
#VU123115 - Missing release of memory after effective lifetime
CVE-2026-1757
CWE-401 Low
No
No
- 20.02.2026 SB2026022038
SB2026022043
SB2026022044
and 5 more
#VU117630 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8732
CWE-835 Low
No
No
- 24.10.2025 SB2025102413
SB20251114100
SB2025111742
and 5 more
#VU115166 - Uncontrolled Recursion
CVE-2025-9714
CWE-674 Medium
No
No
2.10.0 11.09.2025 SB2025091153
SB2025091154
SB2025091275
and 36 more
#VU111225 - Integer overflow
CVE-2025-6021
CWE-190 High
No
No
2.14.4 17.06.2025 SB2025061921
SB2025062408
SB2025062747
and 63 more
#VU111223 - Type confusion
CVE-2025-49796
CWE-843 Medium
No
No
- 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 84 more
#VU111221 - Use After Free
CVE-2025-49794
CWE-416 Medium
No
No
- 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 65 more
#VU104213 - NULL Pointer Dereference
CVE-2025-27113
CWE-476 Medium
No
No
2.12.10, 2.13.6 26.02.2025 SB2025022619
SB2025022621
SB2025022890
and 32 more
#VU104099 - Use After Free
CVE-2024-56171
CWE-416 High
No
No
2.12.10, 2.13.6 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928
CWE-121 High
No
No
2.12.10, 2.13.6 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103502 - Use After Free
CVE-2022-49043
CWE-416 Medium
No
No
2.11.0 03.02.2025 SB2025020327
SB2025020330
SB2025020353
and 60 more
#VU86052 - Use After Free
CVE-2024-25062
CWE-416 High
No
No
2.11.7, 2.12.5 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more
#VU74862 - Resource Management Errors
CVE-2023-29469
CWE-399 Medium
No
No
2.10.4 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more


Showing elements 1 - 20 out of 37