Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qg4c-8pj4-qgw2

Опубликовано: 16 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.

EPSS

Процентиль: 16%
0.00052
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-825

Связанные уязвимости

CVSS3: 9.1
ubuntu
3 дня назад

[Unknown description]

CVSS3: 9.1
redhat
9 дней назад

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.

CVSS3: 9.1
nvd
2 дня назад

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.

CVSS3: 9.1
debian
2 дня назад

A use-after-free vulnerability was found in libxml2. This issue occurs ...

EPSS

Процентиль: 16%
0.00052
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-825