CVE-2025-10911

Опубликовано: 25 сент. 2025

Источник: debian

EPSS Низкий

Описание

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
libxslt	fixed	1.1.43-0.3		package
libxslt	postponed		trixie	package
libxslt	postponed		bookworm	package

Примечания

https://gitlab.gnome.org/GNOME/libxslt/-/issues/144
https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77

EPSS

Процентиль: 7%

0.00173

Низкий

Связанные уязвимости

CVE-2025-10911

CVSS3: 5.5

ubuntu

12 месяцев назад

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

CVE-2025-10911

CVSS3: 5.5

redhat

около 1 года назад

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

CVE-2025-10911

CVSS3: 5.5

nvd

12 месяцев назад

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

CVE-2025-10911

msrc

9 месяцев назад

Libxslt: use-after-free with key data stored cross-rvt

SUSE-SU-2026:0801-1

suse-cvrf

7 месяцев назад

Security update for libxslt

EPSS

Процентиль: 7%

0.00173

Низкий