CVEvulnerability

CVE-2026-6732

7.5 HIGH Published 2026-04-23 Modified 2026-10-26 Official page ↗
Status
Analyzed
Published
2026-04-23
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-843

Description

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

Affected configurations

• xmlsoft libxml2 (>= 2.13.0 < 2.15.3) • redhat hardened images • redhat jboss core services • redhat openshift container platform 4.0 • redhat enterprise linux 6.0 • redhat enterprise linux 7.0 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0 • ibm vios (>= 4.1.0 < 4.1.1.30) • ibm vios 4.1.2.0 • ibm aix (>= 7.2.5 < 7.2.5.12) • ibm aix (>= 7.3.2 < 7.3.3.3) • ibm aix 7.3.4

Related

Weakness · CWE (1)

  • CWE-843 Access of Resource Using Incompatible Type weakness

References