A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a `nextCatalog` element lacks its mandatory `catalog` attribute, leading to the application crashing and causing a Denial of Service (DoS).
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
Required
User action required
Impact Assessment
Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
High
Complete denial of service
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products
red hat:red hat enterprise linux 10
red hat:red hat openshift container platform 4
red hat:red hat enterprise linux 6
red hat:red hat enterprise linux 7
red hat:red hat enterprise linux 8
red hat:red hat enterprise linux 9
red hat:red hat hardened images
References 4
https://access.redhat.com/security/cve/CVE-2026-76781
secalert@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2519776
secalert@redhat.com
https://gitlab.gnome.org/GNOME/libxml2/-/commit/c6324894
secalert@redhat.com
https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/442
secalert@redhat.com