CVE-2026-76781

EUVD-2026-81679
A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a `nextCatalog` element lacks its mandatory `catalog` attribute, leading to the application crashing and causing a Denial of Service (DoS).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 4.88%
Debian logo
Debian Releases
Debian Product
Codename
libxml2
bookworm
postponed
bookworm (security)
vulnerable
forky
2.15.4+dfsg-1
fixed
sid
2.15.4+dfsg-1
fixed
trixie
vulnerable
trixie (security)
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libxml2
bionic
Fixed 2.9.4+dfsg1-6.1ubuntu1.9+esm9
released
focal
Fixed 2.9.10+dfsg-5ubuntu0.20.04.10+esm6
released
jammy
Fixed 2.9.13+dfsg-1ubuntu0.14
released
noble
Fixed 2.9.14+dfsg-1.3ubuntu3.10
released
resolute
Fixed 2.15.2+dfsg-0.1ubuntu0.3
released
trusty
Fixed 2.9.1+dfsg1-3ubuntu4.13+esm13
released
xenial
Fixed 2.9.3+dfsg1-1ubuntu0.7+esm14
released
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
libxml2
Amazon Linux 2
0:2.9.1-6.amzn2.5.28
fixed
Amazon Linux 2023
0:2.10.4-1.amzn2023.0.22
fixed
libxml2-debuginfo
Amazon Linux 2
0:2.9.1-6.amzn2.5.28
fixed
Amazon Linux 2023
0:2.10.4-1.amzn2023.0.22
fixed
libxml2-debugsource
Amazon Linux 2023
0:2.10.4-1.amzn2023.0.22
fixed
libxml2-devel
Amazon Linux 2
0:2.9.1-6.amzn2.5.28
fixed
Amazon Linux 2023
0:2.10.4-1.amzn2023.0.22
fixed
libxml2-python
Amazon Linux 2
0:2.9.1-6.amzn2.5.28
fixed
libxml2-static
Amazon Linux 2
0:2.9.1-6.amzn2.5.28
fixed
Amazon Linux 2023
0:2.10.4-1.amzn2023.0.22
fixed
python3-libxml2
Amazon Linux 2023
0:2.10.4-1.amzn2023.0.22
fixed
python3-libxml2-debuginfo
Amazon Linux 2023
0:2.10.4-1.amzn2023.0.22
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2026:57604
https://access.redhat.com/security/cve/CVE-2026-76781
https://bugzilla.redhat.com/show_bug.cgi?id=2519776
https://gitlab.gnome.org/GNOME/libxml2/-/commit/c6324894
https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/442