Known vulnerabilities in libxml2

Vendor: openEuler
Software: libxml2
Software CPE: cpe:2.3:o:openeuler:libxml2:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 39
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libxml2 libxml2 is affected by 39 known vulnerabilities: 13 high, 22 medium, 4 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147358 - Stack-based buffer overflow
CVE-2026-86140		 CWE-121 Medium
No
No
 2.11.9-18 08.09.2026 SB2026090826
SB20260925164
#VU147355 - Out-of-bounds read
CVE-2026-86137		 CWE-125 Medium
No
No
 2.11.9-18 08.09.2026 SB2026090826
SB20260925164
#VU147356 - Heap-based Buffer Overflow
CVE-2026-86138		 CWE-122 Medium
No
No
 2.11.9-18 08.09.2026 SB2026090826
SB20260925164
#VU140160 - Integer overflow
CVE-2026-17705		 CWE-190 High
No
No
 2.11.9-18 30.07.2026 SB2026073043
SB2026080203
SB2026080380
and 1 more
#VU123115 - Missing release of memory after effective lifetime
CVE-2026-1757		 CWE-401 Low
No
No
 2.11.9-13 20.02.2026 SB2026022038
SB2026022043
SB2026022044
and 6 more
#VU122089 - Resource exhaustion
CVE-2026-0992		 CWE-400 Medium
No
No
 2.9.14-26 27.01.2026 SB2026012787
SB2026012788
SB2026022043
and 7 more
#VU122088 - Uncontrolled Recursion
CVE-2026-0990		 CWE-674 Medium
No
No
 2.9.14-26 27.01.2026 SB2026012787
SB2026012788
SB2026022043
and 7 more
#VU122087 - Uncontrolled Recursion
CVE-2026-0989		 CWE-674 Medium
No
No
 2.9.14-26 27.01.2026 SB2026012787
SB2026012788
SB2026012963
and 9 more
#VU117630 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8732		 CWE-835 Low
No
No
 2.9.14-26 24.10.2025 SB2025102413
SB20251114100
SB2025111742
and 5 more
#VU115166 - Uncontrolled Recursion
CVE-2025-9714		 CWE-674 Medium
No
No
 2.9.10-50 11.09.2025 SB2025091153
SB2025091154
SB2025091275
and 36 more
#VU111225 - Integer overflow
CVE-2025-6021		 CWE-190 High
No
No
 2.9.10-46, 2.9.14-18, 2.11.5-7, 2.11.9-4, 2.11.9-5 17.06.2025 SB2025061921
SB2025062408
SB2025062747
and 64 more
#VU111224 - Stack-based buffer overflow
CVE-2025-6170		 CWE-121 High
No
No
 2.9.10-48, 2.9.14-20, 2.11.5-9, 2.11.9-6 17.06.2025 SB2025061728
SB2025071874
SB2025071875
and 16 more
#VU111223 - Type confusion
CVE-2025-49796		 CWE-843 Medium
No
No
 2.9.10-48, 2.9.14-19, 2.9.14-20, 2.11.5-8, 2.11.9-5 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 86 more
#VU111222 - NULL Pointer Dereference
CVE-2025-49795		 CWE-476 Medium
No
No
 2.11.5-8, 2.11.9-5 17.06.2025 SB2025070832
SB20250711170
SB20250711171
and 8 more
#VU111221 - Use After Free
CVE-2025-49794		 CWE-416 Medium
No
No
 2.9.10-48, 2.9.14-19, 2.9.14-20, 2.11.5-8, 2.11.9-5 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 67 more
#VU107596 - Heap-based Buffer Overflow
CVE-2025-32415		 CWE-122 High
No
No
 2.9.10-44, 2.9.14-16, 2.11.5-6, 2.11.9-3 17.04.2025 SB2025041758
SB2025041880
SB2025042531
and 56 more
#VU107595 - Out-of-bounds read
CVE-2025-32414		 CWE-125 Medium
No
No
 2.9.10-45, 2.9.14-17, 2.11.5-6, 2.11.9-3 17.04.2025 SB2025041758
SB2025041850
SB2025041880
and 56 more
#VU104213 - NULL Pointer Dereference
CVE-2025-27113		 CWE-476 Medium
No
No
 2.9.14-15 26.02.2025 SB2025022619
SB2025022621
SB2025022890
and 32 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 2.9.14-15 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU9687 - Memory corruption
CVE-2017-9047		 CWE-119 Low
No
No
 2.9.14-15 19.12.2017 SB2017121308
SB2017111019
SB2022110928
and 30 more


Showing elements 1 - 20 out of 39