CVE-2026-41401Published
libyang - Heap Use-After-Free Write in XML Metadata Parsing
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-41401 · Microsoft / collected KEV context
cve-program · CVE-2026-41401
- https://github.com/CESNET/libyang/security/advisories/GHSA-9f49-8x56-jmjc
- https://github.com/CESNET/libyang/commit/6b5ed47ee674fbe86b31bbebc4ff26889aeff38c
- https://red.anthropic.com/2026/cvd/findings/ANT-2026-TZQ1KH7E
- https://www.vulncheck.com/advisories/libyang-heap-use-after-free-write-in-xml-metadata-parsing
Related operational evidence
Explicit CVE identifiers- libyang - Heap Use-After-Free Write in XML Metadata Parsing · Advisory content revised · 29 Oct 2026