The libxml2 library, which implements various XML standards, contains two out-of-bounds read vulnerabilities identified as CVE-2025-32414 and CVE-2025-32415. These vulnerabilities involve improper bounds checking that could allow reading memory outside the intended buffer. Red Hat Product Security has rated these issues as moderate severity and released updated libxml2 packages for Red Hat Enterprise Linux 9.2 and related variants. The advisory RHSA-2025:13683 details the fixes and provides references for applying the update. No CVSS scores are provided in the advisory, and there are no known exploits in the wild.

The vulnerabilities allow out-of-bounds reads in the libxml2 library, which may lead to information disclosure or application crashes. The impact is rated as moderate by Red Hat Product Security. There are no reports of active exploitation in the wild. The affected products include multiple architectures and variants of Red Hat Enterprise Linux 9.2.

Red Hat has released updated libxml2 packages that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.2 systems should apply the security update as described in the Red Hat advisory RHSA-2025:13683 and the referenced article https://access.redhat.com/articles/11258. Applying this update mitigates the vulnerabilities. No additional mitigation steps are indicated by the vendor.