Xmlsoft Libxslt vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Xmlsoft Libxslt: 2 record(s), with affected versions and fixes.
cpe:2.3:a:xmlsoft:libxslt

CVE-2025-7424 High · 7.5 CWE-843 Jul 10, 2025

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.

CVE-2022-29824 Medium · 6.5 CWE-190 May 3, 2022

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.