PT-2025-39406 · Libxslt+3 · Libxslt+3

Published 2025-05-06 · Updated 2026-05-08 · CVE-2025-10911

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libxslt (affected versions not specified)

Description A use-after-free issue exists in libxslt during the parsing of xsl nodes. This can result in the dereference of expired pointers, potentially causing application crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-825

Related Identifiers

AZL-67863

AZL-67878

BDU:2026-00311

BIT-JAVA-2025-10911

BIT-JAVA-MIN-2025-10911

BIT-JRE-2025-10911

CVE-2025-10911

ECHO-4CA5-FDF4-045D

OESA-2025-2441

OESA-2025-2442

OESA-2025-2443

OESA-2025-2444

OESA-2025-2445

OESA-2025-2446

OPENSUSE-SU-2025:15611-1

OPENSUSE-SU-2025:20050-1

OPENSUSE-SU-2026:10167-1

OPENSUSE-SU-2026:20312-1

RHSA-2026:11015

SUSE-SU-2025:03491-1

SUSE-SU-2025:03595-1

SUSE-SU-2025:20892-1

SUSE-SU-2025:20897-1

SUSE-SU-2025:21008-1

SUSE-SU-2025:21031-1

SUSE-SU-2025:3875-1

SUSE-SU-2025_21008-1

SUSE-SU-2025_3875-1

SUSE-SU-2026:0568-1

SUSE-SU-2026:0570-1

SUSE-SU-2026:0603-1

SUSE-SU-2026:0605-1

SUSE-SU-2026:0606-1

SUSE-SU-2026:0782-1

SUSE-SU-2026:0801-1

SUSE-SU-2026:20631-1

SUSE-SU-2026:20647-1

SUSE-SU-2026:20657-1

SUSE-SU-2026:20707-1

Affected Products

Debian

Red Os

Suse

Libxslt

References · 108

• https://osv.dev/vulnerability/UBUNTU-CVE-2025-10911 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0568-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2025-10911 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20647-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-10911 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20707-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-10911 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-67878 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-jre-2025-10911 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2446 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0305SE38 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-10911 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0605-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-java-2025-10911 · Vendor Advisory