CVE-2026-1757: Libxml2: memory leak leading to local denial of service in xmllint interactive shell
A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to free the allocated buffer. Repeating this action causes memory to continuously accumulate. Over time, this can exhaust system memory and terminate the xmllint process, creating a denial-of-service condition on the local system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1757?
CVE-2026-1757 is classified as a low severity vulnerability.
How do I fix CVE-2026-1757?
To fix CVE-2026-1757, users should upgrade to the latest version of libxml2 where the memory leak has been addressed.
What software is affected by CVE-2026-1757?
CVE-2026-1757 affects the xmllint utility, which is part of the libxml2 project.
What kind of vulnerability is CVE-2026-1757?
CVE-2026-1757 is a memory leak vulnerability that can lead to a local denial of service.
Where can I find more information on CVE-2026-1757?
More information on CVE-2026-1757 can typically be found in security advisories from libxml2 and platform-specific distributions.