CVE-2025-24855 is a use-after-free vulnerability in the libxslt library's numbers.c file. libxslt is a widely used library for XML transformations using XSLT stylesheets. The vulnerability could potentially lead to memory corruption issues. Red Hat has issued security advisories and released updated libxslt packages for Red Hat Enterprise Linux 9 and its Extended Update Support variants to address this flaw. The fix is included in libxslt version 1.1.34-9.el9_5.1 and subsequent releases. The vendor advisory confirms the availability of patches and rates the security impact as Important (high). There are no reports of active exploitation in the wild.

The vulnerability is a use-after-free condition that could lead to memory corruption, potentially allowing an attacker to cause a denial of service or execute arbitrary code if exploited. However, no known exploits in the wild have been reported. The impact is rated as high by Red Hat Product Security.

A security update for libxslt is available and should be applied promptly. Red Hat has released patched versions of libxslt (starting with version 1.1.34-9.el9_5.1) for Red Hat Enterprise Linux 9 and its Extended Update Support variants. Users should follow Red Hat's official guidance to update their systems as described in https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.