Release of Invalid Pointer or Reference The advisory has been revoked - it doesn't affect any version of package podman-docker (opens in a new tab)

Threat Intelligence

0.66% (52^nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL10-PODMANDOCKER-19645100
published9 Sept 2026
disclosed8 Mar 2026

Report a new vulnerability Found a mistake?

Introduced: 8 Mar 2026

CVE-2026-74860 (opens in a new tab) CWE-763 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream podman-docker package and not the podman-docker package as distributed by RHEL.

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.