By vendor

Xmlsoft vulnerabilities

Known CVEs affecting Xmlsoft products, prioritized by severity, with SEC.co remediation and detection guidance.

1 published vulnerability

• CVE-2026-11979HIGH 7.8

  libxml2's xmlcatalog utility contains a stack-based buffer overflow vulnerability in its interactive shell mode. When a user provides unusually long input lines, the application fails to validate the length before copying that data into fixed-size memory buffers on the stack. This memory corruption can crash the program or, in a worst-case scenario, allow an attacker to execute arbitrary code with the privileges of the user running xmlcatalog. The issue affects the command-parsing logic within the usershell() function.