PT-2025-17209 · Libxml2+12 · Libxml2+12
Published
2025-04-05
·
Updated
2026-05-08
·
CVE-2025-32415
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libxml2 versions 2.13.7 and earlier, libxml2 versions 2.14.x before 2.14.2
Description
The issue is related to a heap-based buffer under-read in the
xmlSchemaIDCFillNodeTables function in xmlschemas.c. This can be exploited by validating a crafted XML document against an XML schema with certain identity constraints or by using a crafted XML schema.Recommendations
For libxml2 versions 2.13.7 and earlier, update to version 2.13.8 or later.
For libxml2 versions 2.14.x before 2.14.2, update to version 2.14.2 or later.
Exploit
Fix
DoS
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Ibm Aix
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Libxml2