HIGHCVSS 7.5Vulnerability
CVE-2026-8177
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory. Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.
Properties
- severity
- HIGH
- cvss_score
- 7.5
- cvss_severity
- HIGH
- epss_score
- 0.00882
- retrieved_at
- 2026-10-08T23:28:05+00:00
- last_source
- FIRST EPSS
- score
- 7.5
- cve_id
- CVE-2026-8177
- cvss_vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- signal_observed_at
- 2026-09-11T17:55:57+00:00
- vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- published_at
- 2026-05-10T21:16:30.003
- last_modified
- 2026-09-18T13:18:37.633
- epss_percentile
- 0.57906
Related Entities (3)
ENRICHED_BY (1)
→[Source]FIRST EPSS
HAS_WEAKNESS (1)
→[Weakness]Out-of-bounds Read
DESCRIBED_BY (1)
→[Source]NVD
Explore deeper with Ninja Signal's threat intelligence graph