PT-2025-11227 · Libxslt+13 · Libxslt+13

Published 2024-12-17 · Updated 2026-05-08 · CVE-2025-24855

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: libxslt versions prior to 1.1.43

Description: The issue is related to a use-after-free error in the numbers.c file of libxslt. This occurs during nested XPath evaluations, where an XPath context node can be modified but never restored. The functions xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal are involved in this issue.

Recommendations: For versions prior to 1.1.43, update to version 1.1.43 or later to resolve the issue. As a temporary workaround, consider restricting the use of nested XPath evaluations until a patch is available.

Fix

Use After Free

Weakness Enumeration

CWE-416

CWE-1395

Related Identifiers

ALSA-2025:3107

ALSA-2025:3615

ALSA-2025:7496

ALT-PU-2025-13573

AZL-58644

AZL-58665

BDU:2025-03640

BIT-JAVA-2025-24855

BIT-JAVA-MIN-2025-24855

BIT-JRE-2025-24855

CESA-2025_3615

CVE-2025-24855

DLA-4089-1

DSA-5884-1

GHSA-MRXW-MXHJ-P664

INFSA-2025_3107

INFSA-2025_3615

MGASA-2025-0110

OESA-2025-1296

OPENSUSE-SU-2025:14894-1

OPENSUSE-SU-2025:15531-1

OPENSUSE-SU-2025_1003-1

OPENSUSE-SU-2025_1125-1

RHSA-2025:3107

RHSA-2025:3389

RHSA-2025:3528

RHSA-2025:3612

RHSA-2025:3615

RHSA-2025:3619

RHSA-2025:3624

RHSA-2025:3625

RHSA-2025:3626

RHSA-2025:3627

RHSA-2025:4098

RHSA-2025:7496

RHSA-2025_3107

RHSA-2025_3615

ROSA-SA-2025-2869

SUSE-SU-2025:1003-1

SUSE-SU-2025:1125-1

SUSE-SU-2025:1494-1

SUSE-SU-2025:20201-1

SUSE-SU-2025:20277-1

USN-7361-1

USN-7787-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Java Platform

Linuxmint

Apple Macos

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Libxslt

References · 116

• https://osv.dev/vulnerability/USN-7787-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-24855 · Security Note
• https://linux.oracle.com/errata/ELSA-2025-4098.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-7361-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7787-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24855 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:3615 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-55549 · Security Note
• https://osv.dev/vulnerability/GHSA-mrxw-mxhj-p664 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-3107.html · Vendor Advisory
• https://gitlab.gnome.org/GNOME/libxslt/-/issues/128 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1125-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15531-1 · Vendor Advisory