CVE-2026-8177: XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
XML::LibXML (Perl)to a version that resolves this vulnerability.Fixed in 2.0210 - Compensating control
If upgrading is not immediately possible, apply the upstream patch for CVE-2026-8177 to XML::LibXML used by Perl DOM node-name methods (XML::LibXML versions through 2.0210 for Perl are affected).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8177?
CVE-2026-8177 has a severity that can lead to out-of-bounds memory access, potentially allowing for denial of service or exploitation by attackers.
How do I fix CVE-2026-8177?
To fix CVE-2026-8177, you should update XML::LibXML to version 2.0211 or later, as these versions contain the necessary patches.
What versions are affected by CVE-2026-8177?
CVE-2026-8177 affects XML::LibXML versions up to and including 2.0210.
What is the impact of CVE-2026-8177?
The impact of CVE-2026-8177 includes potential leakage of sensitive data or application crashes due to out-of-bounds heap memory access.
Is CVE-2026-8177 specific to any programming language?
Yes, CVE-2026-8177 specifically affects the Perl programming language when using the XML::LibXML module.