OSV-2026-565

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libxml2/OSV-2026-565.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-565
Published
2026-04-12T00:05:45.925380Z
Modified
2026-04-12T00:05:45.925675Z
Summary
Heap-buffer-overflow in xmlFAParsePosCharGroup
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=501547873

Crash type: Heap-buffer-overflow READ 1
Crash state:
xmlFAParsePosCharGroup
xmlFAParseCharGroup
xmlFAParseCharGroup
References

Affected packages

OSS-Fuzz / libxml2

Package

Name
libxml2
Purl
pkg:generic/libxml2

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/GNOME/libxml2.git
Events
Introduced
07b13346cb7421090545bfb29f58bcbef8d36261
Fixed
a7511af09f99995cdf81994db21f4eba564276b5
Introduced
d1bccc480fd00b40c86ac26d3f3b6c91c46d18f7

Affected versions

v2.*
v2.15.3

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libxml2/OSV-2026-565.yaml"