GHSA-8626-cqqj-mfffHighCVSS 8.5

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this...

Published
September 8, 2026
Last Modified
September 9, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

🔗 References (5)