numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adoptopenjdk | adoptopenjdk-upgrade-latest | Feb 24, 2026 | Feb 24, 2026 | |
| Alma_linux | alma-upgrade-libxsltalma-upgrade-libxslt-devel | Mar 26, 2025 | Mar 14, 2025 | |
| Alpine Linux | alpine-linux-upgrade-libxsltalpine-linux-upgrade-qt5-qtwebenginealpine-linux-upgrade-qt6-qtwebengine | Aug 8, 2025 | Mar 14, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libxsltamazon-linux-ami-2-upgrade-libxslt-debuginfoamazon-linux-ami-2-upgrade-libxslt-develamazon-linux-ami-2-upgrade-libxslt-python | Apr 17, 2025 | Mar 14, 2025 | |
| Amazon_linux | — | amazon-linux-upgrade-libxslt | Apr 18, 2025 | Mar 14, 2025 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libxsltamazon-linux-2023-upgrade-libxslt-debuginfoamazon-linux-2023-upgrade-libxslt-debugsourceamazon-linux-2023-upgrade-libxslt-develamazon-linux-2023-upgrade-python3-libxsltamazon-linux-2023-upgrade-python3-libxslt-debuginfo | Apr 2, 2025 | Mar 14, 2025 | |
| Apple Osx Libxslt | apple-osx-upgrade-latest | May 20, 2025 | Mar 14, 2025 | |
| Azul Zulu | azul-zulu-upgrade-latest | Feb 25, 2026 | Feb 25, 2026 | |
| Debian | debian-upgrade-libxslt | Mar 25, 2025 | Mar 14, 2025 | |
| Dell Powerstore Dsa2025342 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| Eclipseadoptium | eclipseadoptium-upgrade-latest | Jun 26, 2026 | Mar 14, 2025 | |
| Freebsd | freebsd-upgrade-package-libxslt | May 15, 2025 | May 13, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libxslt | May 13, 2025 | Mar 14, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libxslt | Jun 13, 2025 | Mar 14, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-libxslt | Jun 11, 2025 | Mar 14, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-libxslt | Jun 11, 2025 | Mar 14, 2025 | |
| Jre Vuln | jre-upgrade-latest | Jul 18, 2025 | Mar 14, 2025 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Aug 22, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-libxsltoracle-linux-upgrade-libxslt-develoracle-linux-upgrade-libxslt-python | Mar 26, 2025 | Mar 14, 2025 |
| Redhat Openshift | linuxrpm-upgrade-rhcos | May 12, 2025 | Mar 14, 2025 | |
| Redhat_linux | redhat-upgrade-libxsltredhat-upgrade-libxslt-debuginforedhat-upgrade-libxslt-debugsourceredhat-upgrade-libxslt-develredhat-upgrade-libxslt-python | Mar 25, 2025 | Mar 14, 2025 | |
| Rocky_linux | rocky-upgrade-libxsltrocky-upgrade-libxslt-debuginforocky-upgrade-libxslt-debugsourcerocky-upgrade-libxslt-devel | Jul 31, 2025 | Jul 29, 2025 | |
| Suse | — | suse-upgrade-libexslt0suse-upgrade-libxslt-develsuse-upgrade-libxslt-devel-32bitsuse-upgrade-libxslt-pythonsuse-upgrade-libxslt-toolssuse-upgrade-libxslt1suse-upgrade-libxslt1-32bit | Dec 5, 2025 | Mar 26, 2025 |
| Ubuntu | ubuntu-pro-upgrade-libxslt1-1ubuntu-pro-upgrade-xsltprocubuntu-upgrade-libxslt1-1 | Mar 21, 2025 | Mar 14, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Mar 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub