Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement update
This advisory addresses two vulnerabilities in the libxslt component of the libxml2 library used in Red Hat Enterprise Linux 10. The issues include a type confusion between stylesheet and source nodes and a heap use-after-free caused by attribute corruption. These bugs could lead to memory corruption and potentially impact the stability or security of applications processing XML data. Red Hat has released an update to fix these issues in affected versions of Red Hat Enterprise Linux 10 and related products. No known exploits are reported in the wild at this time.
AI Analysis
Technical Summary
The libxml2 library, which implements various XML standards, had two vulnerabilities in its libxslt component: a type confusion in xmlNode.psvi between stylesheet and source nodes (CWE-843) and a heap use-after-free caused by attribute corruption in xmlAttrPtr (CWE-416). These vulnerabilities affect multiple Red Hat Enterprise Linux 10 variants and related builder products. Red Hat has issued a bug fix advisory (RHBA-2025:12345) with updated packages to address these issues. The advisory does not provide a CVSS score but classifies the severity as high. No known exploits have been reported.
Potential Impact
The vulnerabilities could cause memory corruption in applications using libxslt, potentially leading to crashes or other unintended behavior. The heap use-after-free issue may allow an attacker to manipulate memory, which could be leveraged in targeted attacks. However, there are no known exploits in the wild currently. The impact is limited to affected Red Hat Enterprise Linux 10 versions and related products using the vulnerable libxml2/libxslt packages.
Mitigation Recommendations
Red Hat has released updated libxml2 and libxslt packages for Red Hat Enterprise Linux 10 and related products that fix these vulnerabilities. Users should apply the updates as described in the Red Hat advisory (https://access.redhat.com/articles/11258) to remediate the issues. Since this is an official bug fix advisory, applying the vendor-provided updates is the recommended and effective mitigation. No additional or alternative mitigations are indicated by the vendor.
Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement update
Description
This advisory addresses two vulnerabilities in the libxslt component of the libxml2 library used in Red Hat Enterprise Linux 10. The issues include a type confusion between stylesheet and source nodes and a heap use-after-free caused by attribute corruption. These bugs could lead to memory corruption and potentially impact the stability or security of applications processing XML data. Red Hat has released an update to fix these issues in affected versions of Red Hat Enterprise Linux 10 and related products. No known exploits are reported in the wild at this time.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The libxml2 library, which implements various XML standards, had two vulnerabilities in its libxslt component: a type confusion in xmlNode.psvi between stylesheet and source nodes (CWE-843) and a heap use-after-free caused by attribute corruption in xmlAttrPtr (CWE-416). These vulnerabilities affect multiple Red Hat Enterprise Linux 10 variants and related builder products. Red Hat has issued a bug fix advisory (RHBA-2025:12345) with updated packages to address these issues. The advisory does not provide a CVSS score but classifies the severity as high. No known exploits have been reported.
Potential Impact
The vulnerabilities could cause memory corruption in applications using libxslt, potentially leading to crashes or other unintended behavior. The heap use-after-free issue may allow an attacker to manipulate memory, which could be leveraged in targeted attacks. However, there are no known exploits in the wild currently. The impact is limited to affected Red Hat Enterprise Linux 10 versions and related products using the vulnerable libxml2/libxslt packages.
Mitigation Recommendations
Red Hat has released updated libxml2 and libxslt packages for Red Hat Enterprise Linux 10 and related products that fix these vulnerabilities. Users should apply the updates as described in the Red Hat advisory (https://access.redhat.com/articles/11258) to remediate the issues. Since this is an official bug fix advisory, applying the vendor-provided updates is the recommended and effective mitigation. No additional or alternative mitigations are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHBA-2025:12345
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-7425"]
- Cvss Version
- null
Threat ID: 6a1f4e87e29bf47b50080a1b
Added to database: 6/2/2026, 9:43:35 PM
Last enriched: 6/2/2026, 10:07:52 PM
Last updated: 6/3/2026, 5:05:59 AM
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.