CVE-2026-6732

Published: April 24, 2026Last modified: November 10, 2026

Description

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

Severity score breakdown

Parameter	Value
Base score	7.5
Attack Vector	NETWORK
Attack complexity	LOW
Privileges required	NONE
User interaction	NONE
Scope	UNCHANGED
Confidentiality	NONE
Integrity impact	NONE
Availability impact	HIGH
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Status

Product	Release	Package	Status
Alpaquita Linux	23 LTS	libxml2	Not affected (2.10.3-r2)
		openjdk-nik-23-17	Fixed (23.0.14-r0)
		openjdk-nik-23-21	Fixed (23.1.13-r0)
		openjdk-nik-25-25	Fixed (25.0.5.0.3-r0)
		openjdk11	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-container-jre	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-lite	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-perf	Fixed (11.0.33.0.3_p8-r0)
		openjdk17	Fixed (17.0.21.0.3_p5-r0)
		openjdk17-container-jre	Fixed (17.0.21.0.3_p5-r0)
		openjdk17-crac	Fixed (17.0.21.0.3_p6-r0)
		openjdk17-lite	Fixed (17.0.21.0.3_p5-r0)
		openjdk21	Fixed (21.0.13.0.3_p5-r0)
		openjdk21-container-jre	Fixed (21.0.13.0.3_p5-r0)
		openjdk21-crac	Fixed (21.0.13.0.3_p6-r0)
		openjdk21-lite	Fixed (21.0.13.0.3_p5-r0)
		openjdk25	Fixed (25.0.5.0.3_p5-r0)
		openjdk25-container-jre	Fixed (25.0.5.0.3_p5-r0)
		openjdk25-lite	Fixed (25.0.5.0.3_p5-r0)
		openjdk8	Fixed (8.513_p9-r0)
		openjdk8-perf	Fixed (8.513_p10-r0)
	25 LTS	libxml2	Fixed (2.13.9-r4)
		openjdk-nik-23-17	Fixed (23.0.14-r0)
		openjdk-nik-23-21	Fixed (23.1.13-r0)
		openjdk-nik-25-25	Fixed (25.0.5.0.3-r0)
		openjdk11	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-container-jre	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-lite	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-perf	Fixed (11.0.33.0.3_p8-r0)
		openjdk17	Fixed (17.0.21.0.3_p5-r0)
		openjdk17-container-jre	Fixed (17.0.21.0.3_p5-r0)
		openjdk17-crac	Fixed (17.0.21.0.3_p6-r0)
		openjdk17-lite	Fixed (17.0.21.0.3_p5-r0)
		openjdk21	Fixed (21.0.13.0.3_p5-r0)
		openjdk21-container-jre	Fixed (21.0.13.0.3_p5-r0)
		openjdk21-crac	Fixed (21.0.13.0.3_p6-r0)
		openjdk21-lite	Fixed (21.0.13.0.3_p5-r0)
		openjdk25	Fixed (25.0.5.0.3_p5-r0)
		openjdk25-container-jre	Fixed (25.0.5.0.3_p5-r0)
		openjdk25-lite	Fixed (25.0.5.0.3_p5-r0)
		openjdk8	Fixed (8.513_p9-r0)
		openjdk8-perf	Fixed (8.513_p10-r0)
	Stream	libxml2	Fixed (2.13.9-r5)
		openjdk-nik-23-17	Fixed (23.0.14-r0)
		openjdk-nik-23-21	Fixed (23.1.13-r0)
		openjdk-nik-25-25	Fixed (25.0.5.0.3-r0)
		openjdk11	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-container-jre	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-lite	Fixed (11.0.33.0.3_p7-r0)
		openjdk17	Fixed (17.0.21.0.3_p5-r0)
		openjdk17-container-jre	Fixed (17.0.21.0.3_p5-r0)
		openjdk17-crac	Fixed (17.0.21.0.3_p6-r0)
		openjdk17-lite	Fixed (17.0.21.0.3_p5-r0)
		openjdk21	Fixed (21.0.13.0.3_p5-r0)
		openjdk21-container-jre	Fixed (21.0.13.0.3_p5-r0)
		openjdk21-crac	Fixed (21.0.13.0.3_p6-r0)
		openjdk21-lite	Fixed (21.0.13.0.3_p5-r0)
		openjdk25	Fixed (25.0.5.0.3_p5-r0)
		openjdk25-container-jre	Fixed (25.0.5.0.3_p5-r0)
		openjdk25-lite	Fixed (25.0.5.0.3_p5-r0)
		openjdk8	Fixed (8.513_p9-r0)
Hardened Containers	23 LTS	libxml2	Not affected (2.10.3-r2)
		openjdk-nik-23-17	Fixed (23.0.14-r0)
		openjdk-nik-23-21	Fixed (23.1.13-r0)
		openjdk-nik-25-25	Fixed (25.0.5.0.3-r0)
		openjdk11-container-jre	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-lite	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-perf	Fixed (11.0.33.0.3_p8-r0)
		openjdk17-container-jre	Fixed (17.0.21.0.3_p5-r0)
		openjdk17-crac	Fixed (17.0.21.0.3_p6-r0)
		openjdk17-lite	Fixed (17.0.21.0.3_p5-r0)
		openjdk21-container-jre	Fixed (21.0.13.0.3_p5-r0)
		openjdk21-crac	Fixed (21.0.13.0.3_p6-r0)
		openjdk21-lite	Fixed (21.0.13.0.3_p5-r0)
		openjdk25-container-jre	Fixed (25.0.5.0.3_p5-r0)
		openjdk25-lite	Fixed (25.0.5.0.3_p5-r0)
		openjdk8	Fixed (8.513_p9-r0)
		openjdk8-perf	Fixed (8.513_p10-r0)
	25 LTS	libxml2	Fixed (2.13.9-r4)
		openjdk-nik-23-17	Fixed (23.0.14-r0)
		openjdk-nik-23-21	Fixed (23.1.13-r0)
		openjdk-nik-25-25	Fixed (25.0.5.0.3-r0)
		openjdk11-container-jre	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-lite	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-perf	Fixed (11.0.33.0.3_p8-r0)
		openjdk17-container-jre	Fixed (17.0.21.0.3_p5-r0)
		openjdk17-crac	Fixed (17.0.21.0.3_p6-r0)
		openjdk17-lite	Fixed (17.0.21.0.3_p5-r0)
		openjdk21-container-jre	Fixed (21.0.13.0.3_p5-r0)
		openjdk21-crac	Fixed (21.0.13.0.3_p6-r0)
		openjdk21-lite	Fixed (21.0.13.0.3_p5-r0)
		openjdk25-container-jre	Fixed (25.0.5.0.3_p5-r0)
		openjdk25-lite	Fixed (25.0.5.0.3_p5-r0)
		openjdk8	Fixed (8.513_p9-r0)
		openjdk8-perf	Fixed (8.513_p10-r0)
	Stream	libxml2	Fixed (2.13.9-r5)
		openjdk-nik-23-17	Fixed (23.0.14-r0)
		openjdk-nik-23-21	Fixed (23.1.13-r0)
		openjdk-nik-25-25	Fixed (25.0.5.0.3-r0)
		openjdk11-container-jre	Fixed (11.0.33.0.3_p7-r0)
		openjdk11-lite	Fixed (11.0.33.0.3_p7-r0)
		openjdk17-container-jre	Fixed (17.0.21.0.3_p5-r0)
		openjdk17-crac	Fixed (17.0.21.0.3_p6-r0)
		openjdk17-lite	Fixed (17.0.21.0.3_p5-r0)
		openjdk21-container-jre	Fixed (21.0.13.0.3_p5-r0)
		openjdk21-crac	Fixed (21.0.13.0.3_p6-r0)
		openjdk21-lite	Fixed (21.0.13.0.3_p5-r0)
		openjdk25-container-jre	Fixed (25.0.5.0.3_p5-r0)
		openjdk25-lite	Fixed (25.0.5.0.3_p5-r0)
		openjdk8	Fixed (8.513_p9-r0)
Liberica JDK	8	jdk-full	Fixed (8u512+11)
	8	jre-full	Fixed (8u512+11)
	11	jdk-full	Fixed (11.0.33+11)
	11	jre-full	Fixed (11.0.33+11)
	17	jdk-full	Fixed (17.0.21+11)
	17	jre-full	Fixed (17.0.21+11)
	21	jdk-full	Fixed (21.0.13+11)
	21	jre-full	Fixed (21.0.13+11)
	25	jdk-full	Fixed (25.0.5+11)
	25	jre-full	Fixed (25.0.5+11)

References

Published BELL-SAs

BELL-SA-2026:9