CVE-2016-1835: Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple i...

Security readout for executives and security teams

This is a memory safety flaw in libxml2, a common XML parsing library. A remote attacker could send a specially crafted XML document and crash affected software, causing denial of service. The bundle names libxml2 before 2.9.4 and Apple iOS before 9.3.2 and OS X before 10.11.5. Exposure is most likely where outdated libxml2 parses untrusted XML, including server applications, desktop software, and appliances using vendor-packaged libxml2. The source bundle specifically mentions Apple iOS before 9.3.2 and OS X before 10.11.5, but does not provide a complete affected-product inventory. Prioritize patching for internet-facing or business-critical systems that process XML. The known impact is denial of service, not confirmed code execution in the supplied sources, and there is no KEV evidence of active exploitation. Mitigation focus: Update libxml2 to 2.9.4 or a vendor-patched package.; Update Apple iOS to 9.3.2 or later where applicable.; Update OS X to 10.11.5 or later where applicable..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.