DEBIAN-CVE-2026-86140 - debian/libxml2
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
CWE-121 / CVSS 8 (HIGH)
Evidence
- imported from OSV Debian, untriaged
History
- 2026-10-28: Awaiting approval - bulk import
- 2026-10-29: Awaiting triage - reclassified: OSV Debian bulk import, awaiting triage