Known vulnerabilities in libxml2-static

Known vulnerabilities in libxml2-static

Vendor: OpenAnolis

Software: libxml2-static

Software CPE: cpe:2.3:o:openanolis:libxml2-static:*:*:*:*:*:anolis_os:*:*

Website: https://openanolis.cn/

Total vulnerabilities: 19

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU147357 - Integer overflow CVE-2026-86139	CWE-190	Medium	No	No	2.11.5-21	08.09.2026	SB2026090826 SB2026092174
#VU123115 - Missing release of memory after effective lifetime CVE-2026-1757	CWE-401	Low	No	No	2.11.5-17	20.02.2026	SB2026022038 SB2026022043 SB2026022044 and 5 more
#VU122089 - Resource exhaustion CVE-2026-0992	CWE-400	Medium	No	No	2.11.5-17	27.01.2026	SB2026012787 SB2026012788 SB2026022043 and 7 more
#VU122088 - Uncontrolled Recursion CVE-2026-0990	CWE-674	Medium	No	No	2.11.5-17	27.01.2026	SB2026012787 SB2026012788 SB2026022043 and 7 more
#VU122087 - Uncontrolled Recursion CVE-2026-0989	CWE-674	Medium	No	No	2.11.5-18	27.01.2026	SB2026012787 SB2026012788 SB2026012963 and 9 more
#VU113533 - Use After Free CVE-2025-7425	CWE-416	High	No	No	2.9.1-6.0.2, 2.11.5-13	31.07.2025	SB2025073137 SB2025073144 SB2025073053 and 56 more
#VU111225 - Integer overflow CVE-2025-6021	CWE-190	High	No	No	2.11.5-10	17.06.2025	SB2025061921 SB2025062408 SB2025062747 and 63 more
#VU111224 - Stack-based buffer overflow CVE-2025-6170	CWE-121	High	No	No	2.11.5-14	17.06.2025	SB2025061728 SB2025071874 SB2025071875 and 14 more
#VU111222 - NULL Pointer Dereference CVE-2025-49795	CWE-476	Medium	No	No	2.11.5-15	17.06.2025	SB2025070832 SB20250711170 SB20250711171 and 7 more
#VU107596 - Heap-based Buffer Overflow CVE-2025-32415	CWE-122	High	No	No	2.9.1-6.0.2	17.04.2025	SB2025041758 SB2025041880 SB2025042531 and 56 more
#VU107595 - Out-of-bounds read CVE-2025-32414	CWE-125	Medium	No	No	2.11.5-6	17.04.2025	SB2025041758 SB2025041850 SB2025041880 and 56 more
#VU104213 - NULL Pointer Dereference CVE-2025-27113	CWE-476	Medium	No	No	2.11.5-9	26.02.2025	SB2025022619 SB2025022621 SB2025022890 and 32 more
#VU104099 - Use After Free CVE-2024-56171	CWE-416	High	No	No	2.9.1-6.0.2	20.02.2025	SB2025022003 SB2025022010 SB2025022023 and 111 more
#VU104098 - Stack-based buffer overflow CVE-2025-24928	CWE-121	High	No	No	2.9.1-6.0.2, 2.11.5-11	20.02.2025	SB2025022003 SB2025022010 SB2025022023 and 111 more
#VU96997 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-40896	CWE-611	High	No	No	2.11.5-5	10.09.2024	SB2024091054 SB2024091056 SB2024091071 and 10 more
#VU89430 - Heap-based Buffer Overflow CVE-2024-34459	CWE-122	Medium	No	No	2.11.5-4	14.05.2024	SB2024051432 SB2024051433 SB2024051631 and 31 more
#VU86052 - Use After Free CVE-2024-25062	CWE-416	High	No	No	2.11.5-4	05.02.2024	SB2024020507 SB2024020508 SB2024020742 and 115 more
#VU83291 - Use After Free CVE-2023-45322	CWE-416	Low	No	No	2.11.5-1	20.11.2023	SB2023112027 SB2023112031 SB2023112032 and 16 more
#VU9687 - Memory corruption CVE-2017-9047	CWE-119	Low	No	No	2.9.1-6.0.2, 2.11.5-11	19.12.2017	SB2017121308 SB2017111019 SB2022110928 and 29 more