Unrated severityNVD Advisory· Published Feb 18, 2025· Updated Feb 26, 2026

CVE-2025-24928

Description

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Affected products

Xmlsoft/Libxml2llm-fuzzy2 versions
<2.12.10, >=2.13.0 <2.13.6+ 1 more
- (no CPE)range: <2.12.10, >=2.13.0 <2.13.6
- (no CPE)range: 0
osv-coords87 versions
pkg:apk/chainguard/openjdk-11-openj9 pkg:apk/chainguard/openjdk-11-openj9-dbg pkg:apk/chainguard/openjdk-11-openj9-default-jdk pkg:apk/chainguard/openjdk-11-openj9-default-jvm pkg:apk/chainguard/openjdk-11-openj9-default-policy pkg:apk/chainguard/openjdk-11-openj9-doc pkg:apk/chainguard/openjdk-11-openj9-jmods pkg:apk/chainguard/openjdk-11-openj9-jre pkg:apk/chainguard/openjdk-17-openj9 pkg:apk/chainguard/openjdk-17-openj9-dbg pkg:apk/chainguard/openjdk-17-openj9-default-jdk pkg:apk/chainguard/openjdk-17-openj9-default-jvm pkg:apk/chainguard/openjdk-17-openj9-default-policy pkg:apk/chainguard/openjdk-17-openj9-doc pkg:apk/chainguard/openjdk-17-openj9-jmods pkg:apk/chainguard/openjdk-17-openj9-jre pkg:apk/chainguard/openjdk-21-openj9 pkg:apk/chainguard/openjdk-21-openj9-dbg pkg:apk/chainguard/openjdk-21-openj9-default-jdk pkg:apk/chainguard/openjdk-21-openj9-default-jvm pkg:apk/chainguard/openjdk-21-openj9-default-policy pkg:apk/chainguard/openjdk-21-openj9-doc pkg:apk/chainguard/openjdk-21-openj9-jmods pkg:apk/chainguard/openjdk-21-openj9-jre pkg:apk/chainguard/openjdk-8-openj9 pkg:apk/chainguard/openjdk-8-openj9-dbg pkg:apk/chainguard/openjdk-8-openj9-default-jdk pkg:apk/chainguard/openjdk-8-openj9-default-jvm pkg:apk/chainguard/openjdk-8-openj9-doc pkg:apk/chainguard/openjdk-8-openj9-jre pkg:bitnami/java pkg:bitnami/java-min pkg:bitnami/jre pkg:rpm/almalinux/libxml2 pkg:rpm/almalinux/libxml2-devel pkg:rpm/almalinux/python3-libxml2 pkg:rpm/opensuse/libxml2&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/libxml2&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/libxml2-python&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python-libxml2-python&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python-lxml&distro=openSUSE%20Tumbleweed pkg:rpm/suse/libxml2&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Micro%206.0 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Micro%206.1 pkg:rpm/suse/libxml2&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/libxml2&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%203%2015%20SP6 pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/libxml2-python&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/libxml2-python&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/suse/python-libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/python-libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3
< 0.53.0-r0+ 86 more
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 1.8.0
- (no CPE)range: < 1.8.0
- (no CPE)range: < 1.8.0
- (no CPE)range: < 2.9.13-6.el9_5.2
- (no CPE)range: < 2.9.13-6.el9_5.2
- (no CPE)range: < 2.9.13-6.el9_5.2
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.13.6-1.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.9.7-150000.3.76.1
- (no CPE)range: < 5.3.2-1.1
- (no CPE)range: < 2.9.7-150000.3.76.1
- (no CPE)range: < 2.9.7-150000.3.76.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.9.7-150000.3.76.1
- (no CPE)range: < 2.9.7-150000.3.76.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.9.4-46.81.1
- (no CPE)range: < 2.9.7-150000.3.76.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.9.7-150000.3.76.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.9.4-46.81.1
- (no CPE)range: < 2.11.6-5.1
- (no CPE)range: < 2.11.6-slfo.1.1_2.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.10.3-150500.5.23.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.9.14-150400.5.38.1
- (no CPE)range: < 2.9.4-46.81.1
- (no CPE)range: < 2.9.4-46.81.1
- (no CPE)range: < 2.9.7-150000.3.76.1
- (no CPE)range: < 2.9.7-150000.3.76.1
- (no CPE)range: < 2.9.7-150000.3.76.1
- (no CPE)range: < 2.9.7-150000.3.76.1
- (no CPE)range: < 2.9.7-150000.3.76.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000