The libxml2 library contained two out-of-bounds read vulnerabilities: one general out-of-bounds read (CVE-2025-32414) and another specifically in the xmlSchemaIDCFillNodeTables function (CVE-2025-32415). These vulnerabilities could lead to reading memory outside the intended buffer boundaries. Red Hat Product Security rated the impact as moderate and issued updated libxml2 packages for Red Hat Enterprise Linux 9.4 Extended Update Support to fix these issues. The advisory references bugzilla entries BZ-2358121 and BZ-2360768 for the respective CVEs. No CVSS base scores are provided, and no active exploitation has been reported.

The vulnerabilities allow out-of-bounds reads which may cause application crashes or potentially leak sensitive memory contents. The impact is rated moderate by Red Hat, indicating a security concern but not critical or high severity. There are no known active exploits in the wild. The issues affect libxml2 usage in Red Hat Enterprise Linux 9.4 Extended Update Support environments.

Red Hat has released updated libxml2 packages for Red Hat Enterprise Linux 9.4 Extended Update Support that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2025:13677. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.