PT-2025-37090 · Libxml2+9 · Libxml2+9
Nikita Sveshnikov
·
Published
2022-07-29
·
Updated
2026-04-28
·
CVE-2025-9714
CVSS v3.1
6.2
Medium
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
libxml2 versions prior to 2.9.15
Description:
An uncontrolled recursion issue in XPath evaluation within libxml2 allows a local attacker to cause a stack overflow through crafted expressions. The XPath processing functions
xmlXPathRunEval, xmlXPathCtxtCompile, and xmlXPathEvalExpr previously reset recursion depth to zero before making potentially recursive calls, enabling uncontrolled recursion and a potential stack overflow when called recursively. These functions now preserve recursion depth across recursive calls, allowing for controlled recursion.Recommendations:
Update to libxml2 version 2.9.15 or later.
Fix
DoS
Uncontrolled Recursion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Debian
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Libxml2