CVEFinder.io

CVE-2025-24928

⚠️ high
Summary

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

CVSS Score
7.8
High
EPSS Score
0.0
Exploit Probability
Published Date
2025-02-18
First Seen: 2026-01-05
Last Modified 2025-11-03
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CWE IDs (Weakness Types)
CWE-121

🔗 References 4

https://gitlab.gnome.org/GNOME/libxml2/-/issues/847
Issue Tracking
https://issues.oss-fuzz.com/issues/392687022
Issue Tracking
https://lists.debian.org/debian-lts-announce/2025/02...
https://security.netapp.com/advisory/ntap-20250321-0...
Third Party Advisory

📦 Affected Products 12

Vendor Product Status Affected Versions
xmlsoft libxml2 Affected
< 2.12.10
xmlsoft libxml2 Affected
≥ 2.13.0 < 2.13.6
netapp active_iq_unified_manager Affected
v-
netapp solidfire_\&_hci_management_node Affected
v-
netapp manageability_software_development_kit Affected
v-
netapp h300s_firmware Affected
v-
netapp h410c_firmware Affected
v-
netapp h410s_firmware Affected
v-
netapp h500s_firmware Affected
v-
netapp h700s_firmware Affected
v-
netapp hci_compute_node Affected
v-
netapp ontap Affected
v9

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-22050 🔶 medium 4.3 0.0 ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a ... 2026-01-12
CVE-2025-9714 🔶 medium 6.2 0.0 Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to ca... 2025-09-10
CVE-2025-6170 ℹ️ low 2.5 0.0 A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inpu... 2025-06-16
CVE-2025-6021 ⚠️ high 7.5 0.6 A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a ... 2025-06-12
CVE-2025-32415 ℹ️ low 2.9 0.0 In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer un... 2025-04-17
CVE-2025-30722 🔶 medium 5.3 0.1 Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are a... 2025-04-15
These CVEs affect the same products