vulnerability

F5: CVE-2024-25062: K000141357: libxml2 vulnerability CVE-2024-25062

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

Oct 8, 2024

Added

Jun 17, 2026

Modified

Jun 17, 2026

Description

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Solution

f5-bigip-upgrade-latest

References

CVE-2024-25062
https://attackerkb.com/topics/CVE-2024-25062
https://my.f5.com/manage/s/article/K000141357
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-22424
CWE-416
EUVD-EUVD-2024-22424

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report