Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Libxslt: use-after-free with key data stored cross-rvt (libxslt)

CVE-2025-10911
MEDIUM 5.5

At a glance

Source
NVD
EPSS
EPSS 0.17 % · percentile 7 ()
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Deferred

Search on…

Description

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

Weaknesses (CWE)

  • CWE-825 — Expired Pointer Dereference

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hredhat
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HNVD · secalert@redhat.com (Secondary)

European references

CERT-FR advisories

Affected products

ProductVersions
libxsltaffected 0 ≤ 1.1.43
Red Hat · Red Hat Enterprise Linux 10unaffected 0:1.1.39-8.el10_2.1 < *
Red Hat · Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:1.1.39-8.el10_0.1 < *
Red Hat · Red Hat Enterprise Linux 8unaffected 0:1.1.32-6.4.el8_10 < *
Red Hat · Red Hat Enterprise Linux 8unaffected 0:1.1.32-6.4.el8_10 < *
Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:1.1.32-8.el8_4.1 < *
Red Hat · Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:1.1.32-8.el8_4.1 < *
Red Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:1.1.32-8.el8_6.1 < *
Red Hat · Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-Onunaffected 0:1.1.32-8.el8_6.1 < *
Red Hat · Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:1.1.32-8.el8_8.1 < *
Red Hat · Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:1.1.32-8.el8_8.1 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 0:1.1.34-14.el9_8.1 < *
Red Hat · Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:1.1.34-12.el9_2 < *
Red Hat · Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:1.1.34-15.el9_4 < *
Red Hat · Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:1.1.34-13.el9_6.2 < *
Red Hat · Red Hat Discovery 2unaffected 1782756541 < *
Red Hat · Red Hat Hardened Imagesunaffected 1.1.45-0.1.hum1 < *
Red Hat · Red Hat OpenShift AI 3.4unaffected 1790703542 < *
Red Hat · Red Hat Update Infrastructure 5unaffected 1784795076 < *
Red Hat · Red Hat Update Infrastructure 5unaffected 1787241260 < *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD