Threat database

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. Security Fix(es): * libxslt: use-after-free with key data stored cross-RVT (CVE-2025-10911) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A use-after-free vulnerability (CVE-2025-24855) exists in libxslt before version 1.1.43, specifically in numbers.c during nested XPath evaluations. This vulnerability affects functions such as xsltNumberFormatGetValue and xsltEvalXPathPredicate. It is rated as high severity. A patch is available from Red Hat and other vendors to address this issue.