Vulnerabilidades do GNOME Libxml2
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam GNOME Libxml2: 3 registro(s), com versões afetadas e correções.
CVE-2026-6653
Crítica · 9.8
CWE-416 22/06/2026
Use-After-Free em xmlParseInternalSubset do libxml2 Causando Negação de Serviço
Use After Free em xmlParseInternalSubset da libxml2 da GNOME, na versão 2.9.11 até 2.11.0, permite que um atacante remoto cause negação de serviço por meio de entrada XML maliciosamente elaborada, com tratamento inadequado de resolução de entidades.
CVE-2025-7425
Alta · 7.8
CWE-416 10/07/2025
Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.
CVE-2025-49795
Alta · 7.5
CWE-825 16/06/2025
Libxml: null pointer dereference leads to denial of service (dos)
A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.