CVE-2026-86137

A flaw was found in libxml2. This out-of-bounds read vulnerability, specifically within the xmlFAParsePosCharGroup function, could allow an attacker to cause a denial of service. By processing specially crafted XML input, the affected component may attempt to read data beyond its allocated memory buffer, leading to application instability or crashes.

An out-of-bounds read in the libxml2 XML regular expression parser (xmlFAParsePosCharGroup) could allow a local attacker to cause a denial of service. The vulnerability carries a low impact rating due to its complex exploitation requirements and reliance on local access. This flaw is not present in any Red Hat products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.