Resource Consumption Vulnerability in libxml2 Library Affecting Red Hat

CVE-2026-0992

What is CVE-2026-0992?

A flaw in the libxml2 library presents an uncontrolled resource consumption vulnerability that occurs when processing XML catalogs with repeated elements that reference the same downstream catalog. An attacker can exploit this flaw by providing specially crafted XML catalogs, inducing the parser to redundantly process catalog chains. This can lead to significant CPU consumption, severely degrading the availability of the affected applications and potentially resulting in a denial-of-service scenario.

References