VulnerabilityPublished 7 Apr 2025Updated 25 Jun 2026

Red Hat Security Advisory: libxslt security update

Affects Red HatSource GCVE Database

Mentioned vulnerabilities

Severity

High

Rated by Threat Radar

Data as of 25 Jun 2026, 22:15 UTC

What to do

Description

This advisory addresses two use-after-free vulnerabilities in the libxslt library, which is used for transforming XML files using XSLT stylesheets. The vulnerabilities are identified as CVE-2025-24855 and CVE-2024-55549. These issues could potentially lead to memory corruption or crashes when processing XML transformations. The advisory is issued by Red Hat Product Security and is classified as high severity. No specific affected versions or patch information is provided in the available data.

Impact

The use-after-free vulnerabilities in libxslt may lead to memory corruption, potentially causing application crashes or other unintended behavior when processing XML transformations. The severity is considered high based on the advisory classification, but no further impact details or exploitation information are available.

Summary

Two use-after-free vulnerabilities exist in the libxslt library: one in numbers.c (CVE-2025-24855) and another in the xsltGetInheritedNsList function (CVE-2024-55549). These vulnerabilities could allow an attacker to cause memory corruption or application instability during XML transformations using XSLT. The advisory is from Red Hat Product Security but does not include explicit details on affected versions or remediation status. No CVSS scores are provided.

References

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 25 Jun 2026, 22:15 UTC

Technical details

References

Community reviews

Related threats