CVE-2025-6021
â ī¸ highSummary
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
CVSS Score
7.5
High
EPSS Score
1.7
Exploit Probability
Published Date
2025-06-12
First Seen: 2026-01-05
đ Relative Risk Intelligence
This CVE is Moderate Risk - more severe than 68.9% of all 329,456 vulnerabilities in our database.
#102,448
Above average severity
Severity Percentile
đ¯ CISA SSVC Assessment Updated: Sep 3, 2025
đ Exploitation Status
Poc
Proof-of-concept available
âī¸ Automatable
YES
Can be exploited automatically
đĨ Technical Impact
Partial
Limited system impact
đ Discovered By
Red Hat would like to thank Ahmed Lekssays for reporting this issue.
SSVC data provided by
CISA
Last Modified
2026-04-19
Source
NVD đ
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE IDs (Weakness Types)