Memory Management Flaw in xmllint Utility by libxml2

CVE-2026-1757

What is CVE-2026-1757?

A memory management flaw exists in the xmllint utility, part of the libxml2 package. Specifically, when a user inputs only whitespace, the utility does not release memory allocated for this input, resulting in a gradual accumulation of memory usage. As users repeatedly execute this command, the unfreed buffers can lead to system memory exhaustion. Ultimately, this could cause the xmllint process to crash, leading to a denial-of-service condition on local systems. Proper handling and release of memory under these circumstances are critical to maintaining system stability.

References