Vulnerabilidades do Xmlsoft Libxslt
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Xmlsoft Libxslt: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:xmlsoft:libxslt
CVE-2025-7424
Alta · 7.5
CWE-843 10/07/2025
Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes
A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.
CVE-2022-29824
Média · 6.5
CWE-190 03/05/2022
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.