CVE-2025-7424

Katalog CVE

CVSS 7.5 · High EPSS 1,3%

Kerentanan Access of Resource Using Incompatible Type ('Type Confusion') pada xmlsoft libxslt, redhat openshift container platform +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.

Rincian

Terbit di NVD

10 Juli 2025

Terakhir diubah

12 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber redhat.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2025-7424 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2379228 issue tracking · advisory pihak ketiga
• https://access.redhat.com/errata/RHBA-2025:12345
• https://access.redhat.com/errata/RHSA-2026:11015
• https://gitlab.gnome.org/GNOME/libxslt/-/issues/139
• http://seclists.org/fulldisclosure/2025/Aug/0
• http://seclists.org/fulldisclosure/2025/Jul/30
• http://seclists.org/fulldisclosure/2025/Jul/32
• http://seclists.org/fulldisclosure/2025/Jul/33
• http://seclists.org/fulldisclosure/2025/Jul/35
• http://seclists.org/fulldisclosure/2025/Jul/37
• http://www.openwall.com/lists/oss-security/2025/07/11/2
• https://lists.debian.org/debian-lts-announce/2025/09/msg00024.html