Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-12863

Опубликовано: 11 нояб. 2025
Источник: msrc
CVSS3: 7.5
EPSS Низкий

Описание

Libxml2: namespace use-after-free in xmlsettreedoc() function of libxml2

EPSS

Процентиль: 17%
0.00068
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
12 дней назад

A flaw was found in the xmlSetTreeDoc() function of the libxml2 XML parsing library. This function is responsible for updating document pointers when XML nodes are moved between documents. Due to improper handling of namespace references, a namespace pointer may remain linked to a freed memory region when the original document is destroyed. As a result, subsequent operations that access the namespace can lead to a use-after-free condition, causing an application crash.

CVSS3: 7.5
nvd
12 дней назад

A flaw was found in the xmlSetTreeDoc() function of the libxml2 XML parsing library. This function is responsible for updating document pointers when XML nodes are moved between documents. Due to improper handling of namespace references, a namespace pointer may remain linked to a freed memory region when the original document is destroyed. As a result, subsequent operations that access the namespace can lead to a use-after-free condition, causing an application crash.

CVSS3: 7.5
debian
12 дней назад

A flaw was found in the xmlSetTreeDoc() function of the libxml2 XML pa ...

CVSS3: 7.5
github
12 дней назад

A flaw was found in the xmlSetTreeDoc() function of the libxml2 XML parsing library. This function is responsible for updating document pointers when XML nodes are moved between documents. Due to improper handling of namespace references, a namespace pointer may remain linked to a freed memory region when the original document is destroyed. As a result, subsequent operations that access the namespace can lead to a use-after-free condition, causing an application crash.

EPSS

Процентиль: 17%
0.00068
Низкий

7.5 High

CVSS3