Skip to content
statance
MenuClose
Log inStart for free ↗
high · CVSS 8.5

CVE-2026-74860

Libxml2: double-free/uaf in libxml2 python bindings

Published 8 Sept 2026 · Source updated 6 Nov 2026 · Retrieved 2026-11-06 06:48 UTC

Monitor this CVE ↗Full CVE monitoring on Pro and Business

What happened?

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Description supplied by CVE Program. Formatting is simplified; follow the original advisory for full details.

Affected software and versions

Source-provided software and version information
SoftwareVersion informationFixed version
libxml2Red Hatunaffected: 0:2.12.5-10.el10_2.4 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.12.5-9.el10_0.9 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.1-6.el7_9.20 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.7-21.el8_10.9 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.7-21.el8_10.9 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.7-9.el8_4.20 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.7-9.el8_4.20 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.7-13.el8_6.24 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.7-13.el8_6.24 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.7-16.el8_8.24 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.7-16.el8_8.24 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.13-14.el9_8.5 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.13-14.el9_8.5 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.13-3.el9_2.20 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.13-13.el9_4.10 to < *See vendor advisory
libxml2Red Hatunaffected: 0:2.9.13-13.el9_6 to < *See vendor advisory
cert-manager/jetstack-cert-manager-rhel9Red Hatunaffected: 1790589912 to < *See vendor advisory
cert-manager/cert-manager-istio-csr-rhel9Red Hatunaffected: 1790589914 to < *See vendor advisory
cert-manager/cert-manager-operator-rhel9Red Hatunaffected: 1790589855 to < *See vendor advisory
costmanagement/costmanagement-ui-rhel10Red Hatunaffected: 1791460851 to < *See vendor advisory
libxml2-mainRed Hatunaffected: 2.15.4-0.1.hum1 to < *See vendor advisory
rhai/base-image-spyre-rhel9Red Hatunaffected: 1793041986 to < *See vendor advisory
rhai/base-image-rocm-rhel9Red Hatunaffected: 1793041981 to < *See vendor advisory
rhai/base-image-cpu-rhel9Red Hatunaffected: 1793042072 to < *See vendor advisory
rhai/base-image-cuda-rhel9Red Hatunaffected: 1793042067 to < *See vendor advisory
rhai/base-image-tpu-rhel9Red Hatunaffected: 1793041987 to < *See vendor advisory
rhai/base-image-cpu-rhel9Red Hatunaffected: 1793329709 to < *See vendor advisory
rhai/base-image-cuda-rhel9Red Hatunaffected: 1793328358 to < *See vendor advisory
rhai/base-image-rocm-7.1-rhel9Red Hatunaffected: 1793042006 to < *See vendor advisory
rhai/base-image-cuda-12.9-rhel9Red Hatunaffected: 1793042145 to < *See vendor advisory
rhai/base-image-tpu-rhel9Red Hatunaffected: 1793042006 to < *See vendor advisory
rhai/base-image-gaudi-rhel9Red Hatunaffected: 1793042011 to < *See vendor advisory
rhai/base-image-cuda-13.0-rhel9Red Hatunaffected: 1793042086 to < *See vendor advisory
rhai/base-image-cpu-rhel9Red Hatunaffected: 1793042088 to < *See vendor advisory
rhai/base-image-rocm-6.4-rhel9Red Hatunaffected: 1793041995 to < *See vendor advisory
rhai/base-image-spyre-rhel9Red Hatunaffected: 1793042074 to < *See vendor advisory
rhai/base-image-neuron-rhel9Red Hatunaffected: 1793042008 to < *See vendor advisory
rhai/base-image-cuda-13.0-rhel9Red Hatunaffected: 1793326837 to < *See vendor advisory
rhai/base-image-tpu-rhel9Red Hatunaffected: 1793042010 to < *See vendor advisory
rhai/base-image-cpu-rhel9Red Hatunaffected: 1793042162 to < *See vendor advisory

Version information comes from the source record and can include unaffected products and exceptions. Distribution packages may contain backported fixes: an older upstream version alone does not prove a server is affected.

Is it being exploited?

This CVE was not listed in the CISA catalogue at our last retrieval. This does not establish that exploitation is absent.

CISA data retrieved 2026-11-06 16:38 UTC. Check CISA ↗

How to respond

  1. Confirm the product, installed package version, and any configuration requirements in the vendor advisory.
  2. Follow the vendor’s remediation or workaround guidance in the references below. Structured fixed-version data is unavailable here; the publisher’s description may include a fix or workaround.
  3. Restart affected services if required, then verify the running version. Known exploitation may warrant investigation as well as patching.

Sources and remediation references

This public advisory does not determine whether a particular server is affected. Records are refreshed as sources change; verify urgent decisions against the original advisory.

← Browse the public CVE feed