PT-2025-46052 · Julia · Xml2 Jll

Publicado 2025-10-17 · Atualizado 2025-10-17

OSV

An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.

Identificadores relacionados

JLSEC-2025-78

Produtos afetados

Xml2 Jll

Referências · 15

• https://support.apple.com/kb/HT213535 · Nota
• https://support.apple.com/kb/HT213531 · Nota
• http://seclists.org/fulldisclosure/2022/Dec/24 · Nota
• http://seclists.org/fulldisclosure/2022/Dec/25 · Nota
• https://support.apple.com/kb/HT213534 · Nota
• https://security.netapp.com/advisory/ntap-20221209-0003 · Nota
• https://support.apple.com/kb/HT213533 · Nota
• https://osv.dev/vulnerability/JLSEC-2025-78 · Aviso do Fabricante
• https://support.apple.com/kb/HT213536 · Nota
• https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433b05bb0376be4725804c54ef1d80b · Nota
• http://seclists.org/fulldisclosure/2022/Dec/21 · Nota
• http://seclists.org/fulldisclosure/2022/Dec/27 · Nota
• http://seclists.org/fulldisclosure/2022/Dec/26 · Nota
• https://gitlab.gnome.org/GNOME/libxml2/-/tags · Nota
• https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3 · Nota