← Back

CVE-2025-6021

nvd nist
Published: Jun 12, 2025Modified: Jun 30, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: secalert@redhat.com (Secondary)

Description

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

Affected (72)

1 product
Libxml2
19 products
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Before 2.14.4
Configuration B
71 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Version 10.0
Version 8.0
Version 9.0
Redhat
Version 10.0
Version 8.4
Version 8.6
Version 8.8
Version 9.4
Version 9.6
Redhat
Version 10.0_aarch64
Version 8.0_aarch64
Version 9.0_aarch64
Version 9.4_aarch64
Redhat
Version 10.0_aarch64
Version 9.4_aarch64
Version 9.6_aarch64
Redhat
Version 10.0_s390x
Version 8.0_s390x
Version 9.4_s390x
Redhat
Version 10.0_s390x
Version 9.0_s390x
Version 9.4_s390x
Version 9.6_s390x
Redhat
Version 10.0_ppc64le
Version 8.0_ppc64le
Version 9.0_ppc64le
Redhat
Version 10.0_ppc64le
Version 9.4_ppc64le
Version 9.6_ppc64le
Version 7.0
Redhat
Version 8.2
Version 8.4
Version 8.6
Version 9.2
Version 9.4
Version 9.6
Version 9.4_ppc64le
Version 8.8
Version 1.0
All versions
Redhat
Version 4.12
Version 4.13
Version 4.14
Version 4.15
Version 4.16
Version 4.17
Version 4.18
Redhat
Version 4.13
Version 4.14
Version 4.15
Version 4.16
Version 4.17
Version 4.18
Redhat
Version 4.13
Version 4.14
Version 4.15
Version 4.16
Version 4.17
Version 4.18
Redhat
Version 4.13
Version 4.14
Version 4.15
Version 4.16
Version 4.17
Version 4.18
Redhat
Version 4.13
Version 4.14
Version 4.15
Version 4.16
Version 4.17
Version 4.18

References (29)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Issue Tracking
Source: secalert@redhat.com
ExploitIssue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.