Public vulnerability disclosure
CVE-2026-74860
Libxml2: double-free/uaf in libxml2 python bindings
publishedCWE-763
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.
Technical severity8.5 highCVSS 3.1 · CNA: redhat
Published2026-09-08Source updated 2026-11-02
Collected2026-11-022 attributed sources
Fixes and workarounds
No remediation reported in collected sources.
Missing remediation information is not evidence that no patch exists.
Affected products and versions
| Product | Versions | Authority |
|---|---|---|
| Red Hat Enterprise Linux 10 Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.12.5-10.el10_2.4; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.12.5-9.el10_0.9; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 8 Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.9.7-21.el8_10.9; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.9.7-9.el8_4.20; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.9.7-9.el8_4.20; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.9.7-13.el8_6.24; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.9.7-13.el8_6.24; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.9.7-16.el8_8.24; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.9.7-16.el8_8.24; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 9 Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.9.13-14.el9_8.5; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.9.13-3.el9_2.20; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.9.13-13.el9_4.10; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.9.13-13.el9_6; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Cert Manager support for Red Hat OpenShift release 1.20 Red Hat cert-manager/jetstack-cert-manager-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1790589912; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Cert Manager support for Red Hat OpenShift release 1.20 Red Hat cert-manager/cert-manager-istio-csr-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1790589914; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Cert Manager support for Red Hat OpenShift release 1.20 Red Hat cert-manager/cert-manager-operator-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1790589855; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Cost Management On-Premise 1 Red Hat costmanagement/costmanagement-ui-rhel10
https://catalog.redhat.com/software/containers/ |
≥ 1791460851; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Hardened Images Red Hat libxml2-main
https://catalog.redhat.com/software/containers/ |
≥ 2.15.4-0.1.hum1; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.0 Red Hat rhai/base-image-spyre-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793041986; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.0 Red Hat rhai/base-image-rocm-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793041981; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.0 Red Hat rhai/base-image-cpu-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042072; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.0 Red Hat rhai/base-image-cuda-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042067; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.0 Red Hat rhai/base-image-tpu-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793041987; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.4 Red Hat rhai/base-image-rocm-7.1-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042006; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.4 Red Hat rhai/base-image-cuda-12.9-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042145; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.4 Red Hat rhai/base-image-tpu-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042006; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.4 Red Hat rhai/base-image-gaudi-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042011; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.4 Red Hat rhai/base-image-cuda-13.0-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042086; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.4 Red Hat rhai/base-image-cpu-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042088; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.4 Red Hat rhai/base-image-rocm-6.4-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793041995; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.4 Red Hat rhai/base-image-spyre-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042074; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.4 Red Hat rhai/base-image-neuron-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042008; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.5 Red Hat rhai/base-image-tpu-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042010; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.5 Red Hat rhai/base-image-cpu-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042162; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.5 Red Hat rhai/base-image-gaudi-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042004; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.5 Red Hat rhai/base-image-rubin-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042092; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.5 Red Hat rhai/base-image-cuda-12.9-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042117; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.5 Red Hat rhai/base-image-cuda-13.0-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042093; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.5 Red Hat rhai/base-image-spyre-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042114; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.5 Red Hat rhai/base-image-rocm-7.14-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042024; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat OpenShift AI 3.5 Red Hat rhai/base-image-neuron-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1793042008; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Update Infrastructure 5 Red Hat rhui5/cds-kubernetes-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1791978534; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Update Infrastructure 5 Red Hat rhui5/cds-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1791978528; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Update Infrastructure 5 Red Hat rhui5/haproxy-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1791978528; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Update Infrastructure 5 Red Hat rhui5/installer-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1791964013; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Update Infrastructure 5 Red Hat rhui5/rhua-rhel9
https://catalog.redhat.com/software/containers/ |
≥ 1791978693; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 10 Red Hat podman
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unaffected |
CNA: redhat |
| Red Hat Enterprise Linux 6 Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unknown |
CNA: redhat |
| Red Hat Enterprise Linux 7 Red Hat libxml2
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: affected |
CNA: redhat |
| Red Hat Enterprise Linux 8 Red Hat container-tools:rhel8/podman
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unaffected |
CNA: redhat |
| Red Hat Enterprise Linux 9 Red Hat podman
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unaffected |
CNA: redhat |
| Red Hat Hardened Images Red Hat swift-lang
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unaffected |
CNA: redhat |
| Red Hat OpenShift Container Platform 4 Red Hat openshift/ose-rhel-coreos-8
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unaffected |
CNA: redhat |
| Red Hat OpenShift Container Platform 4 Red Hat openshift/ose-rhel-coreos-9
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unaffected |
CNA: redhat |
| Red Hat OpenShift Container Platform 4 Red Hat podman
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unaffected |
CNA: redhat |
| Red Hat OpenShift Container Platform 5 Red Hat openshift/ose-rhel-coreos-9
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unaffected |
CNA: redhat |
Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.
CVSS assessments
| Version / score | Vector | Authority |
|---|---|---|
| 3.1 / 8.5 high |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H | CNA: redhat |
Exploit evidence
No exploit evidence in collected sources. This is not proof of no exploitation.
References
- https://access.redhat.com/errata/RHSA-2026:64463CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:71585CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:71586CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:71641CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:72470CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:72475CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:72476CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:79357CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:82939CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:89750CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:89759CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:90309CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91202CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91204CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91206CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91207CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91217CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91218CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91219CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91224CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91232CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91233CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91234CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91235CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91236CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91237CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91238CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91241CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91242CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91243CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91244CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91245CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91246CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91248CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:91249CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:92352CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:92589CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:93463CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:93473CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2026-74860CNA: redhat · vdb-entry, x_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2529697CNA: redhat · issue-tracking, x_refsource_REDHAT