{"id":"CVE-2026-41401","aliases":["AZL-87354","DEBIAN-CVE-2026-41401","EUVD-2026-31832","GHSA-9f49-8x56-jmjc","GHSA-v7jp-vmx6-5429","MGASA-2026-0302","SUSE-SU-2026:22200-1","SUSE-SU-2026:22208-1","SUSE-SU-2026:2334-1","SUSE-SU-2026:2335-1","SUSE-SU-2026:2337-1","UBUNTU-CVE-2026-41401","USN-8485-1","openSUSE-SU-2026:10868-1","openSUSE-SU-2026:21113-1"],"status":"published","title":"libyang - Heap Use-After-Free Write in XML Metadata Parsing","description":"libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00673,"percentile":0.52459,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2026-05-26T14:08:48Z","modified":"2026-11-05T11:46:36Z","fixes":[{"ecosystem":"Azure Linux:3","package":"libyang","fixed_in":["2.1.148-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libyang","fixed_in":["6.4.13-1"],"sources":["osv"]},{"ecosystem":"Mageia:10","package":"libyang","fixed_in":["3.13.5-1.1.mga10"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"libyang","fixed_in":["3.13.5-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"libyang","fixed_in":["3.13.6-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libyang","fixed_in":["3.13.6-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.12.2-1","3.13.5-1","3.13.5-2","3.13.6-1","3.13.6-1~bpo13+1","4.2.2-1","4.2.2-2","4.2.2-3","4.3.3-1","4.3.4-1","4.7.3-1","5.0.2-1","5.0.8-1","5.4.1+really5.4.1-1","5.4.1-1","5.4.5-1","5.4.9-1","5.7.1-1","5.8.5-1","5.8.6-1","5.8.6-2","6.1.4-1","6.4.13-1","6.4.3-1","6.4.6-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.13-1"}]}],"versions":["3.12.2-1","3.13.5-1","3.13.5-2","3.13.6-1","3.13.6-1~bpo13+1","4.2.2-1","4.2.2-2","4.2.2-3","4.3.3-1","4.3.4-1","4.7.3-1","5.0.2-1","5.0.8-1","5.4.1+really5.4.1-1","5.4.1-1","5.4.5-1","5.4.9-1","5.7.1-1","5.8.5-1","5.8.6-1","5.8.6-2","6.1.4-1","6.4.3-1","6.4.6-1"]},{"source":"osv","ecosystem":"Debian:12","package":"libyang2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.148-0.1","2.1.148-0.2","2.1.30-2","2.1.30-2.1","2.1.30-2.1~exp1"]},{"source":"osv","ecosystem":"Mageia:10","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.5-1.1.mga10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-160000.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-160000.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-160000.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-160000.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-8.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-8.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-150700.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16.105-1","0.16.105-2","0.16.105-3","0.16.105-3build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.225-1.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.5-2ubuntu0.1"}]}],"versions":["3.7.8-3","3.12.2-1","3.12.2-1ubuntu1","3.13.5-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.6-1ubuntu0.1"}]}],"versions":["3.13.5-2","3.13.6-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.5-2ubuntu0.1"}]}],"versions":["3.7.8-3","3.12.2-1","3.12.2-1ubuntu1","3.13.5-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.6-1ubuntu0.1"}]}],"versions":["3.13.5-2","3.13.6-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.6-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-160000.4.1"}]}],"bundled":2}],"products":[{"vendor":"cesnet","product":"libyang"},{"vendor":"libyang","product":"libyang"}],"references":[{"url":"https://github.com/CESNET/libyang/security/advisories/GHSA-9f49-8x56-jmjc","tags":["vendor-advisory","exploit","advisory","report"]},{"url":"https://github.com/CESNET/libyang/commit/6b5ed47ee674fbe86b31bbebc4ff26889aeff38c","tags":["patch","fix","report"]},{"url":"https://red.anthropic.com/2026/cvd/findings/ANT-2026-TZQ1KH7E","tags":["third-party-advisory","exploit","advisory","report"]},{"url":"https://www.vulncheck.com/advisories/libyang-heap-use-after-free-write-in-xml-metadata-parsing","tags":["third-party-advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41401","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-v7jp-vmx6-5429"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41401.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-41401","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0302.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35795","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8485-1","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622200-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1265330","tags":["report"]},{"url":"https://bugzilla.suse.com/1266316","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44673","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622208-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262334-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262335-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262337-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-41401","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-41401","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-41401","title":"libyang - Heap Use-After-Free Write in XML Metadata Parsing","description":"libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.","status":"published","published":"2026-05-26T14:08:48.973Z","modified":"2026-11-08T14:02:59.788Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-08T15:43:33.322657Z"}],"euvd":[{"id":"EUVD-2026-31832","description":"libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.","status":"published","published":"2026-05-26T14:08:48Z","modified":"2026-11-08T14:02:59Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-08T15:13:09.268962Z"}],"ghsa":[{"id":"GHSA-v7jp-vmx6-5429","title":"libyang before 5.2.6 contains a heap use-after-free write vulnerability in...","description":"libyang before 5.2.6 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.","status":"published","published":"2026-05-26T15:32:10Z","modified":"2026-05-26T15:32:17Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:08:18.132911Z"}],"nvd":[{"id":"CVE-2026-41401","description":"libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.","status":"published","published":"2026-05-26T15:16:35.66Z","modified":"2026-10-29T21:17:23.027Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:12:20.131508Z"}],"osv":[{"id":"CVE-2026-41401","title":"libyang - Heap Use-After-Free Write in XML Metadata Parsing","description":"libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.","status":"published","published":"2026-05-26T14:08:48.973Z","modified":"2026-11-09T07:04:11.596149055Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-09T03:16:17.543303Z"},{"id":"DEBIAN-CVE-2026-41401","description":"libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.","status":"published","published":"2026-05-26T15:16:35.66Z","modified":"2026-10-30T09:49:14.504229468Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:45:54.892385Z"},{"id":"UBUNTU-CVE-2026-41401","description":"libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.","status":"published","published":"2026-05-26T15:16:00Z","modified":"2026-11-05T11:46:36.74066025Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-05T13:30:15.321876Z"},{"id":"AZL-87354","title":"CVE-2026-41401 affecting package libyang for versions less than 2.1.148-3","description":"libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries. Attackers can trigger this vulnerability by submitting crafted YANG XML documents with specific metadata attributes to applications parsing untrusted XML data, causing process crashes or potential code execution.","status":"published","published":"2026-05-26T15:16:35Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.190302Z"},{"id":"MGASA-2026-0302","title":"Updated libyang packages fix a security vulnerability","description":"The updated packages fix a security vulnerability:\nHeap Use-After-Free Write in XML Metadata Parsing. (CVE-2026-41401)\n","status":"published","published":"2026-07-27T22:45:13Z","modified":"2026-07-27T23:00:05.905231142Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:10868-1","title":"libyang-devel-3.13.6-2.1 on GA media","description":"These are all security issues fixed in the libyang-devel-3.13.6-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-27T00:00:00Z","modified":"2026-05-28T08:15:08.802959945Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21113-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-20T06:58:54Z","modified":"2026-06-30T18:24:42.666083803Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22200-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-20T06:56:16Z","modified":"2026-06-24T09:00:08.106354529Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22208-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-20T06:56:16Z","modified":"2026-06-24T09:00:08.09959643Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2334-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-10T08:42:41Z","modified":"2026-06-11T12:15:17.276423898Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:2335-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-10T08:43:17Z","modified":"2026-06-11T12:15:17.240053265Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:2337-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-10T08:43:47Z","modified":"2026-06-11T12:15:17.277862705Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"USN-8485-1","title":"libyang vulnerability","description":"It was discovered that libyang incorrectly handled certain metadata list\npointers. An attacker could use this issue to cause libyang to crash,\nresulting in a denial of service, or possibly execute arbitrary code.","status":"published","published":"2026-06-30T11:49:11Z","modified":"2026-06-30T18:34:58.534918732Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}