CVE-2026-74860

Summary

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Affected Software

VendorProductVersion RangeStatus
Red HatRed Hat Enterprise Linux 100:2.12.5-10.el10_2.4 < *unaffected
Red HatRed Hat Enterprise Linux 80:2.9.7-21.el8_10.9 < *unaffected
Red HatRed Hat Enterprise Linux 80:2.9.7-21.el8_10.9 < *unaffected
Red HatRed Hat Enterprise Linux 90:2.9.13-14.el9_8.5 < *unaffected
Red HatRed Hat Enterprise Linux 90:2.9.13-14.el9_8.5 < *unaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790589912 < *unaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790589914 < *unaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790589855 < *unaffected
Red HatRed Hat Hardened Images2.15.4-0.1.hum1 < *unaffected

Weaknesses

  • CWE-763: Release of Invalid Pointer or Reference

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References