PT-2025-46049 · Julia · Xml2 Jll+1
Published
2025-10-17
·
Updated
2025-10-17
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Xml2 Jll
Xslt Jll