CVE-2025-6021

Katalog CVE

CVSS 7.5 · High EPSS 1,4%

Kerentanan Out-of-bounds Write pada xmlsoft libxml2, redhat jboss core services +13 lainnya. Skor CVSS 3.1 7.5 (High) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

Rincian

Terbit di NVD

12 Juni 2025

Terakhir diubah

12 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber redhat.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 72 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://gitlab.gnome.org/GNOME/libxml2/-/issues/926 exploit · issue tracking · advisory vendor
• https://access.redhat.com/errata/RHSA-2025:10630 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:10698 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:10699 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:11580 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:12098 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:12099 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:12199 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:12237 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:12239 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:12240 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:12241 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:13267 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:13289 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:13325 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:13335 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:13336 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:14059 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:14396 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:15308 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:15672 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2025-6021 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2025:11673
• https://access.redhat.com/errata/RHSA-2025:19020
• https://access.redhat.com/errata/RHSA-2026:7519