PT-2026-38830 · Bitnami · Jre

Publicado 2026-05-08 · Atualizado 2026-05-08

OSV

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Identificadores relacionados

BIT-JRE-2024-25062

Produtos afetados

Jre

Referências · 8

• https://security.netapp.com/advisory/ntap-20241018-0009 · Nota
• https://gitlab.gnome.org/GNOME/libxml2/-/tags · Nota
• https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html · Nota
• https://osv.dev/vulnerability/BIT-jre-2024-25062 · Aviso do Fabricante
• https://openjdk.org/groups/vulnerability/advisories/2024-10-15 · Nota
• https://gitlab.gnome.org/GNOME/libxml2/-/issues/604 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-25062 · Nota de Segurança
• https://oracle.com/security-alerts/cpuoct2024.html · Nota