Update libxml2 to version 2.15.3 (MINDBREEZE42872)

ID: MINDBREEZE42872 
Affected Components: Mindbreeze InSpire 
Severity: 7.5 High 
Status: Final 
First published: August 5, 2026 
CVEs: CVE-2025-6021, CVE-2026-6732 

Summary 

• A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input. 
• A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable. 

Hotfix Information 

Fixed with following versions of Mindbreeze InSpire On-Premises or Mindbreeze InSpire SaaS: 

• Mindbreeze InSpire 26.4 Release
• Mindbreeze InSpire SaaS is not affected, Windows only