CVE-2026-8177— XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-8177
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences
Source: NVD (National Vulnerability Database)
Vulnerability Description
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory. Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨界内存读
Source: NVD (National Vulnerability Database)
Vulnerability Title
XML::LibXML 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
XML::LibXML是CPAN Authors开源的一个用于解析和操作XML文件的Perl接口工具。 XML::LibXML 2.0210及之前版本存在缓冲区错误漏洞，该漏洞源于解析包含截断UTF-8字节序列的XML节点名称时读取越界堆内存，导致解析器读取超出输入字符串末尾进入相邻堆内存，可能造成崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SHLOMIF | XML::LibXML | 0 ~ 2.0210 | - |
II. Public POCs for CVE-2026-8177
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8177
请登录查看更多情报信息。
IV. Related Vulnerabilities
V. Comments for CVE-2026-8177
No comments yet