中文

// CVE · PUBLISHED 2025-06-16

CVE-2025-49794

Red Hat / Red Hat Enterprise Linux 10 · Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support · Red Hat / Red Hat Enterprise Linux 8 · +27

9.1 · CVSS 3.1Critical

Description

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.