CVE-2025-7425: Use After Free in GNOME libxml2
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.
AI Analysis
Technical Summary
This advisory covers security updates in Red Hat OpenShift Container Platform 4.18.23 that fix three vulnerabilities: a heap use-after-free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425), and two out-of-bounds read vulnerabilities in libxml2 (CVE-2025-32414 and CVE-2025-32415). These issues could lead to memory corruption or information disclosure. The advisory directs users to upgrade to the updated container images and RPM packages available through the appropriate release channels. Detailed upgrade instructions are provided by Red Hat. The vulnerabilities have been assigned a high severity rating by the source, and the update is classified as important by Red Hat Product Security.
Potential Impact
The vulnerabilities involve memory safety errors (heap use-after-free and out-of-bounds reads) in widely used XML processing libraries (libxslt and libxml2) within the OpenShift Container Platform. These could potentially lead to application crashes or unauthorized memory access, impacting the stability and security of the platform. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated container images and RPM packages for OpenShift Container Platform 4.18.23 that address these vulnerabilities. Users should upgrade their clusters to this version using the OpenShift CLI (oc) or web console as soon as the updates are available in their release channel. Detailed upgrade instructions are provided in the Red Hat documentation. No alternative mitigations are indicated; applying the official update is the recommended remediation.
CVE-2025-7425: Use After Free in GNOME libxml2
Description
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.
CVSS v3.1
Score 7.8high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers security updates in Red Hat OpenShift Container Platform 4.18.23 that fix three vulnerabilities: a heap use-after-free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425), and two out-of-bounds read vulnerabilities in libxml2 (CVE-2025-32414 and CVE-2025-32415). These issues could lead to memory corruption or information disclosure. The advisory directs users to upgrade to the updated container images and RPM packages available through the appropriate release channels. Detailed upgrade instructions are provided by Red Hat. The vulnerabilities have been assigned a high severity rating by the source, and the update is classified as important by Red Hat Product Security.
Potential Impact
The vulnerabilities involve memory safety errors (heap use-after-free and out-of-bounds reads) in widely used XML processing libraries (libxslt and libxml2) within the OpenShift Container Platform. These could potentially lead to application crashes or unauthorized memory access, impacting the stability and security of the platform. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated container images and RPM packages for OpenShift Container Platform 4.18.23 that address these vulnerabilities. Users should upgrade their clusters to this version using the OpenShift CLI (oc) or web console as soon as the updates are available in their release channel. Detailed upgrade instructions are provided in the Red Hat documentation. No alternative mitigations are indicated; applying the official update is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:14818
- Cve Count
- 3
- Additional Cves
- ["CVE-2025-32414","CVE-2025-32415"]
- Cvss Version
- 3.1
Threat ID: 6a1f4e88e29bf47b50081bad
Added to database: 06/02/2026, 21:43:36 UTC
Last enriched: 08/02/2026, 22:49:36 UTC
Last updated: 08/14/2026, 00:41:09 UTC
Views: 67
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.