Wind River Support Network

HomeDefectsLIN1024-35397

Acknowledged

LIN1024-35397 : Security Advisory - libxml2 - CVE-2026-74860

Created: Oct 23, 2026 Updated: Oct 27, 2026

Resolved Date: Oct 23, 2026

Found In Version: 10.24.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Userspace

Description

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.
Data source: Red Hat, Inc. (secalert@redhat.com)