vulnerability

Red Hat: CVE-2016-1836: Important: libxml2 security update (RHSA-2016:1292)

Name: Red Hat: CVE-2016-1836: Important: libxml2 security update (RHSA-2016:1292)
Creator: Red Hat
Published: 2016-05-20T00:00:00.000Z
Keywords: CVE, Red Hat, 2016, 1836, Important, redhat-upgrade-libxml2, redhat-upgrade-libxml2-debuginfo, redhat-upgrade-libxml2-devel, redhat-upgrade-libxml2-python, redhat-upgrade-libxml2-static, Severity 4

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

May 20, 2016

Added

Jul 29, 2016

Modified

Feb 19, 2026

Description

Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document.

Solutions

redhat-upgrade-libxml2redhat-upgrade-libxml2-debuginforedhat-upgrade-libxml2-develredhat-upgrade-libxml2-pythonredhat-upgrade-libxml2-static

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report