A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libxml2 | Oct 9, 2025 | Jun 16, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libxml2amazon-linux-2023-upgrade-libxml2-debuginfoamazon-linux-2023-upgrade-libxml2-debugsourceamazon-linux-2023-upgrade-libxml2-develamazon-linux-2023-upgrade-libxml2-staticamazon-linux-2023-upgrade-python3-libxml2amazon-linux-2023-upgrade-python3-libxml2-debuginfo | Jul 30, 2025 | Jun 11, 2025 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jun 16, 2025 | |
| Debian | no-fix-debian-deb-package | Jun 16, 2025 | Jun 16, 2025 | |
| Freebsd | freebsd-upgrade-package-libxml2freebsd-upgrade-package-linux-c7-libxml2freebsd-upgrade-package-linux-rl9-libxml2 | Jul 13, 2025 | Jul 12, 2025 | |
| Ibm Aix | ibm-aix-libxml2_advisory9 | Sep 25, 2025 | Jul 17, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-libxml2oracle-linux-upgrade-libxml2-develoracle-linux-upgrade-libxml2-staticoracle-linux-upgrade-python3-libxml2 | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | redhat-upgrade-libxml2redhat-upgrade-libxml2-debuginforedhat-upgrade-libxml2-debugsourceredhat-upgrade-libxml2-develredhat-upgrade-libxml2-staticredhat-upgrade-python3-libxml2redhat-upgrade-python3-libxml2-debuginfo | Jul 9, 2025 | Jun 16, 2025 | |
| Rocky_linux | rocky-upgrade-libxml2rocky-upgrade-libxml2-debuginforocky-upgrade-libxml2-debugsourcerocky-upgrade-libxml2-develrocky-upgrade-libxml2-staticrocky-upgrade-python3-libxml2rocky-upgrade-python3-libxml2-debuginfo | Feb 5, 2026 | Oct 3, 2025 | |
| Suse | — | suse-upgrade-libxml2-2suse-upgrade-libxml2-2-32bitsuse-upgrade-libxml2-develsuse-upgrade-libxml2-devel-32bitsuse-upgrade-libxml2-docsuse-upgrade-libxml2-toolssuse-upgrade-python3-libxml2suse-upgrade-python311-libxml2suse-upgrade-python313-libxml2 | Dec 5, 2025 | Jul 9, 2025 |
| Ubuntu | ubuntu-upgrade-libxml2 | Oct 30, 2025 | Jun 16, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 21, 2025 | Jun 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub