Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Bug Fix(es) and Enhancement(s): * libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes [rhel-10.0.z] (JIRA:RHEL-102746) * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr [rhel-10.0.z] (JIRA:RHEL-102794)
AI Analysis
Technical Summary
The libxml2 library, which implements various XML standards, had two vulnerabilities in its libxslt component affecting Red Hat Enterprise Linux 10. The first is a type confusion vulnerability in the xmlNode.psvi field that causes confusion between stylesheet and source nodes (JIRA:RHEL-102746). The second is a heap use-after-free vulnerability caused by corruption of the attribute pointer (xmlAttrPtr) (JIRA:RHEL-102794). These issues are tracked as CVE-2025-7424 and CVE-2025-7425 respectively and are categorized under CWE-843 (Type Confusion), CWE-416 (Use After Free), and CWE-825 (Expansion of Memory). Red Hat has released updated libxml2 and libxslt packages for Red Hat Enterprise Linux 10 and related product variants to fix these vulnerabilities. The advisory references RHBA-2025:12345 and RHSA-2026:11015 for details on the fixes and update procedures.
Potential Impact
Successful exploitation of these vulnerabilities could lead to memory corruption issues such as use-after-free and type confusion within libxslt processing. This may result in application crashes or potentially allow an attacker to execute arbitrary code or cause denial of service. The severity is rated high by Red Hat. No known active exploits have been reported in the wild at this time.
Mitigation Recommendations
Red Hat has released official updates for libxml2 and libxslt packages addressing these vulnerabilities. Users running Red Hat Enterprise Linux 10 and related products should apply the updates as described in the Red Hat advisories RHBA-2025:12345 and RHSA-2026:11015. Detailed update instructions are available at https://access.redhat.com/articles/11258 and https://images.redhat.com/. No additional mitigation steps are indicated by the vendor beyond applying these patches.
Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement update
Description
The libxml2 library is a development toolbox providing the implementation of various XML standards. Bug Fix(es) and Enhancement(s): * libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes [rhel-10.0.z] (JIRA:RHEL-102746) * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr [rhel-10.0.z] (JIRA:RHEL-102794)
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The libxml2 library, which implements various XML standards, had two vulnerabilities in its libxslt component affecting Red Hat Enterprise Linux 10. The first is a type confusion vulnerability in the xmlNode.psvi field that causes confusion between stylesheet and source nodes (JIRA:RHEL-102746). The second is a heap use-after-free vulnerability caused by corruption of the attribute pointer (xmlAttrPtr) (JIRA:RHEL-102794). These issues are tracked as CVE-2025-7424 and CVE-2025-7425 respectively and are categorized under CWE-843 (Type Confusion), CWE-416 (Use After Free), and CWE-825 (Expansion of Memory). Red Hat has released updated libxml2 and libxslt packages for Red Hat Enterprise Linux 10 and related product variants to fix these vulnerabilities. The advisory references RHBA-2025:12345 and RHSA-2026:11015 for details on the fixes and update procedures.
Potential Impact
Successful exploitation of these vulnerabilities could lead to memory corruption issues such as use-after-free and type confusion within libxslt processing. This may result in application crashes or potentially allow an attacker to execute arbitrary code or cause denial of service. The severity is rated high by Red Hat. No known active exploits have been reported in the wild at this time.
Mitigation Recommendations
Red Hat has released official updates for libxml2 and libxslt packages addressing these vulnerabilities. Users running Red Hat Enterprise Linux 10 and related products should apply the updates as described in the Red Hat advisories RHBA-2025:12345 and RHSA-2026:11015. Detailed update instructions are available at https://access.redhat.com/articles/11258 and https://images.redhat.com/. No additional mitigation steps are indicated by the vendor beyond applying these patches.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHBA-2025:12345
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-7425"]
- Cvss Version
- 3.1
Threat ID: 6a1f4e87e29bf47b50080a1b
Added to database: 06/02/2026, 21:43:35 UTC
Last enriched: 08/16/2026, 18:04:03 UTC
Last updated: 09/13/2026, 22:01:31 UTC
Views: 166
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.