A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libxslt-develUpgrade libxslt-debuginfoUpgrade libxsltUpgrade libxslt-python | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-libxslt-debuginfoUpgrade libxsltUpgrade libxslt-debugsourceUpgrade libxslt-debuginfoUpgrade libxslt-develUpgrade python3-libxslt | Aug 5, 2025 | Jul 10, 2025 |
| Apple Osx Libxslt | — | Upgrade macOS to the latest version | Aug 7, 2025 | Aug 7, 2025 |
| Apple Safari | — | Upgrade to Apple Safari version 18.6Uninstall Apple Safari on Windows | Jul 31, 2025 | Jul 31, 2025 |
| Debian | — | Upgrade libxslt | Jul 14, 2025 | Jul 10, 2025 |
| Freebsd | — | Upgrade linux-c7-libxsltUpgrade linux-rl9-libxsltUpgrade libxslt | Jul 13, 2025 | Jul 12, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libxslt | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libxslt | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libxslt | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libxslt | Oct 24, 2025 | Oct 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 11, 2025 | Jul 10, 2025 |
| Suse | — | Upgrade libexslt0Upgrade libxslt1Upgrade libxslt-toolsUpgrade libxslt-devel | Dec 5, 2025 | Aug 14, 2025 |
| Ubuntu | — | Upgrade xsltproc (Ubuntu Pro)Upgrade libxslt1.1Upgrade xsltprocUpgrade libxslt1.1 (Ubuntu Pro) | Dec 16, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub