The libxml2 library, which implements various XML standards, contains an out-of-bounds read vulnerability in the xmlSchemaIDCFillNodeTables function (CVE-2025-32415). This vulnerability was rated as moderate severity by Red Hat Product Security. It affects Red Hat Enterprise Linux 8.8 variants including AppStream E4S, BaseOS E4S, and Telecommunications Update Service. Red Hat has released updated libxml2 packages to fix this issue, as detailed in advisory RHSA-2025:13806. No CVSS score is provided in the advisory, and no known exploits have been reported. The vulnerability is categorized under CWE-125 (Out-of-bounds Read).

The vulnerability allows an out-of-bounds read in the libxml2 library, which could potentially lead to information disclosure or application instability when processing specially crafted XML data. The severity is rated moderate by Red Hat. There are no reports of exploitation in the wild at this time. The affected systems include various Red Hat Enterprise Linux 8.8 distributions.

Red Hat has released updated libxml2 packages that address this vulnerability. Users of affected Red Hat Enterprise Linux 8.8 variants should apply the security update as described in Red Hat advisory RHSA-2025:13806 and the update instructions at https://access.redhat.com/articles/11258. Applying this official fix will remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.