Red Hat · Red Hat Openshift Container Platform · CVE-2025-6021
**Name of the Vulnerable Software and Affected Versions**
libxml2 (affected versions not specified)
Red Hat Enterprise Linux versions 6 through 10
Red Hat JBoss Core Services (affected versions not specified)
Red Hat OpenShift Container Platform 4 (affected versions not specified)
**Description**
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
**Recommendations**
For libxml2, consider disabling the `xmlBuildQName` function until a patch is available.
For Red Hat Enterprise Linux versions 6 through 10, update to a version that includes the fix for this issue.
For Red Hat JBoss Core Services, restrict access to the vulnerable `xmlBuildQName` function to minimize the risk of exploitation.
For Red Hat OpenShift Container Platform 4, avoid using the `xmlBuildQName` function in affected API endpoints until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.