The vulnerability CVE-2025-11731 affects the exsltFuncResultComp() function in libxslt, which processes EXSLT <func:result> elements during XML stylesheet parsing. Due to improper type handling, the function may confuse an XML document node with an XML element node, causing type confusion. This flaw can result in unexpected memory reads and potentially cause application crashes, leading to denial of service conditions. The vulnerability has a CVSS 3.1 base score of 3.1, indicating low severity, with network attack vector, high attack complexity, no privileges required, and user interaction needed. Red Hat has released updated libxslt RPM packages (version 1.1.45-0.1.hum1) for Red Hat Hardened Images to address this issue. The vendor advisories confirm the availability of patches and recommend applying the updates to remediate the vulnerability.

The vulnerability can cause application instability or denial of service due to unexpected memory reads and crashes triggered by type confusion in XML node handling. There is no indication of confidentiality or integrity impact. Exploitation is difficult and requires user interaction, limiting the risk. No known exploits in the wild have been reported.

A fix is available from Red Hat in updated libxslt RPM packages (libxslt-1.1.45-0.1.hum1 and related). Users of affected Red Hat Hardened Images should apply the provided updates as per the Red Hat advisory (RHSA-2026:11015) to remediate this vulnerability. Follow official Red Hat update procedures documented at https://images.redhat.com/. No additional mitigation actions are indicated by the vendor.