Libxslt: use-after-free with key data stored cross-rvt

Summary

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

Timeline

1. Sep 25, 2025, 3:13 PM UTCCVE published
2. Sep 29, 2025, 3:48 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Oct 2, 2026, 2:19 AM UTCRecord last updated

Affected versions

• libxslt

  through 1.1.43

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• discovery/discovery-ui-rhel9

  Version range not reported

• libxslt-main

  Version range not reported

• rhai/base-image-neuron-rhel9

  Version range not reported

• rhui5/rhua-rhel9

  Version range not reported

• rhui5/rhua-tp-rhel9

  Version range not reported

• libxslt

  Version range not reported

• libxslt

  Version range not reported

• openshift/ose-rhel-coreos-8

  Version range not reported

• openshift/ose-rhel-coreos-9

  Version range not reported

• javaBitnami

  fixed in 1.8.0; From 1.9.0 · fixed in 8.0.481

• java-minBitnami

  fixed in 1.8.0; From 1.9.0 · fixed in 8.0.481

• jreBitnami

  fixed in 1.8.0; From 1.9.0 · fixed in 8.0.481

References 19