CVE-2026-6732
- Source
- https://cve.org/CVERecord?id=CVE-2026-6732
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-6732.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-6732
- Downstream
ALPINE (1)
BELL (1)
DEBIAN (1)
ECHO (1)
JLSEC (1)
MGASA (1)
openSUSE (1)
RHSA (1)
ROOT (1)
UBUNTU (1)
- Related
- Published
- 2026-04-23T22:19:34Z
- Modified
- 2026-11-07T02:30:47Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Libxml2: libxml2: denial of service via crafted xsd-validated document
- Details
-
A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.
- Database specific
{ "cna_assigner": "redhat", "cwe_ids": [ "CWE-843" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/6xxx/CVE-2026-6732.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "fixed": "2.15.3-0.1.hum1" } ], "source": "AFFECTED_FIELD", "strategy": "InverseAffectedRanges" } ] } ] }- References
-
- https://access.redhat.com/downloads/content/package-browser/
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
- https://catalog.redhat.com/software/containers/
- https://access.redhat.com/errata/RHSA-2026:11503
- https://access.redhat.com/security/cve/CVE-2026-6732
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/6xxx/CVE-2026-6732.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-6732
- https://bugzilla.redhat.com/show_bug.cgi?id=2461300
- https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097
- https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411