CVE-2026-86141

A NULL pointer dereference in libxml2's xmlRegNewParserCtxt function allows a local attacker to cause a denial of service (DoS). The flaw occurs when strlen() is called on an unverified pointer following a failed xmlStrdup() memory allocation, resulting in a process crash.

A Low-severity NULL pointer dereference in libxml2's xmlRegNewParserCtxt function can cause a process crash during XML parsing via xmlRegexpCompile. Exploitation depends on forcing a memory allocation failure, presenting high attack complexity and limiting the impact strictly to local Denial of Service. No Red Hat products are affected by this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.