CVE-2025-49796 is a critical vulnerability in libxml2 caused by type confusion when processing specific sch:name elements in XML files. This leads to memory corruption, potentially causing the libxml2 library to crash or exhibit undefined behavior due to corrupted memory. The vulnerability is classified under CWE-125 (Out-of-bounds Read). Red Hat has released multiple security advisories with patches for affected versions, primarily targeting Red Hat Enterprise Linux 10 and its extended update support versions. The CVSS v3.1 base score is 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H), indicating network exploitable with no privileges or user interaction required, causing high impact on integrity and availability. No public exploits are currently known.

Successful exploitation can cause denial of service by crashing libxml2 or lead to undefined behavior due to memory corruption, potentially affecting the integrity and availability of applications relying on libxml2 for XML processing. There is no confirmed confidentiality impact. The vulnerability is remotely exploitable without authentication or user interaction.

Red Hat has released official security updates addressing CVE-2025-49796 and related libxml2 vulnerabilities. Users of Red Hat Enterprise Linux 10 and related distributions should apply the provided patches promptly. Refer to Red Hat advisories RHSA-2025:10630 and others for detailed update instructions. No additional mitigation steps are required beyond applying the official patches.