PT-2025-46066 · Julia · Xml2 Jll
Published
2025-10-17
·
Updated
2025-10-17
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions
xmlXPathRunEval, xmlXPathCtxtCompile, and xmlXPathEvalExpr were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Xml2 Jll