vulnerability

FreeBSD: VID-bd2af307-3e50-11f0-95d4-00a098b42aeb (CVE-2024-56171): libxml2 -- Use After Free

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:N)

Published

May 31, 2025

Added

Jun 1, 2025

Modified

Jun 15, 2026

Description

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Solution

freebsd-upgrade-package-libxml2

References

CVE-2024-56171
https://attackerkb.com/topics/CVE-2024-56171
CWE-416
EUVD-EUVD-2025-4769
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-4769

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report