vulnerability

Azul Zulu: CVE-2024-25062: Vulnerability in Azul Zulu

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

Feb 4, 2024

Added

Nov 18, 2024

Modified

Jul 8, 2026

Description

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Solutions

azul-zulu-jdk8azul-zulu-jdk11azul-zulu-jdk17azul-zulu-jdk21

References

CVE-2024-25062
https://attackerkb.com/topics/CVE-2024-25062
https://docs.azul.com/core/cve
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-22424
CWE-416
EUVD-EUVD-2024-22424

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report