xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99708.json"