Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-49794

Libxml: heap use after free (uaf) leads to denial of service (dos)

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 2.15.0
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • libxml2

    fixed in 2.15.0

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • openshift/ose-rhel-coreos-8

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • web-terminal/web-terminal-rhel9-operator

    Version range not reported

  • web-terminal/web-terminal-tooling-rhel9

    Version range not reported

  • web-terminal/web-terminal-tooling-rhel9

    Version range not reported

  • openshift-serverless-1/logic-data-index-ephemeral-rhel8

    Version range not reported

  • openshift-serverless-1/logic-data-index-postgresql-rhel8

    Version range not reported

  • openshift-serverless-1/logic-db-migrator-tool-rhel8

    Version range not reported

  • openshift-serverless-1/logic-jobs-service-ephemeral-rhel8

    Version range not reported

  • openshift-serverless-1/logic-jobs-service-postgresql-rhel8

    Version range not reported

  • openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8

    Version range not reported

  • openshift-serverless-1/logic-management-console-rhel8

    Version range not reported

  • openshift-serverless-1/logic-operator-bundle

    Version range not reported

  • openshift-serverless-1/logic-rhel8-operator

    Version range not reported

  • openshift-serverless-1/logic-swf-builder-rhel8

    Version range not reported

  • openshift-serverless-1/logic-swf-devmode-rhel8

    Version range not reported

  • cert-manager/jetstack-cert-manager-rhel9

    Version range not reported

  • compliance/openshift-file-integrity-rhel8-operator

    Version range not reported

  • libxml2-main

    Version range not reported

  • insights-proxy/insights-proxy-container-rhel9

    Version range not reported

  • 3scale-amp2/system-rhel9

    Version range not reported

  • 3scale-amp2/zync-rhel9

    Version range not reported

  • libxml2

    Version range not reported

References 25

access.redhat.com