A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libxsltUpgrade libxslt-pythonUpgrade libxslt-debuginfoUpgrade libxslt-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libxsltUpgrade python3-libxslt-debuginfoUpgrade libxslt-debugsourceUpgrade libxslt-debuginfoUpgrade libxslt-develUpgrade python3-libxslt | Aug 5, 2025 | Jul 10, 2025 |
| Apple Osx Libxslt | — | Upgrade macOS to the latest version | Aug 7, 2025 | Jul 29, 2025 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 18.6 | Jul 31, 2025 | Jul 31, 2025 |
| Debian | — | Upgrade libxslt | Jul 14, 2025 | Jul 10, 2025 |
| Freebsd | — | Upgrade libxsltUpgrade linux-c7-libxsltUpgrade linux-rl9-libxslt | Jul 13, 2025 | Jul 12, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libxslt | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libxslt | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libxslt | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libxslt | Oct 24, 2025 | Oct 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 11, 2025 | Jul 10, 2025 |
| Suse | — | Upgrade libexslt0Upgrade libxslt1Upgrade libxslt-toolsUpgrade libxslt-devel | Dec 5, 2025 | Aug 14, 2025 |
| Ubuntu | — | Upgrade xsltproc (Ubuntu Pro)Upgrade libxslt1.1Upgrade libxslt1.1 (Ubuntu Pro)Upgrade xsltproc | Dec 16, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub