{"id":"CVE-2025-11731","aliases":["AZL-70550","AZL-70601","BELL-CVE-2025-11731","DEBIAN-CVE-2025-11731","EUVD-2025-34140","GHSA-9f23-58rv-2hx4","OESA-2026-1724","OESA-2026-1725","OESA-2026-1726","OESA-2026-1727","OESA-2026-1728","RHSA-2026:11015","SUSE-SU-2025:20892-1","SUSE-SU-2025:20897-1","SUSE-SU-2025:21008-1","SUSE-SU-2025:21031-1","SUSE-SU-2025:3743-1","SUSE-SU-2025:3778-1","SUSE-SU-2025:3875-1","SUSE-SU-2026:0603-1","UBUNTU-CVE-2025-11731","openSUSE-SU-2025:15641-1","openSUSE-SU-2025:20050-1","openSUSE-SU-2026:11147-1"],"status":"published","title":"Libxslt: type confusion in exsltfuncresultcompfunction of libxslt","description":"A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u003cfunc:result\u003e elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00283,"percentile":0.21082,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-843"],"published":"2025-10-14T06:02:35Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libxslt","fixed_in":["1.1.34-9"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libxslt","fixed_in":["1.1.43-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"libxslt","fixed_in":["1.1.37-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"libxslt","fixed_in":["1.1.43-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libxslt","fixed_in":["1.1.43-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"libxslt","fixed_in":["1.1.37-r3"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"libxslt","fixed_in":["1.1.43-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"libxslt","fixed_in":["1.1.43-r1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxslt","fixed_in":["1.1.43-0.3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libxslt","fixed_in":["1.1.34-13.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libxslt","fixed_in":["1.1.37-7.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"libxslt","fixed_in":["1.1.39-7.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"libxslt","fixed_in":["1.1.39-7.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"libxslt","fixed_in":["1.1.39-7.oe2403sp2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxslt","fixed_in":["1.1.32-150000.3.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxslt","fixed_in":["1.1.32-150000.3.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxslt","fixed_in":["1.1.32-150000.3.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxslt","fixed_in":["1.1.32-150000.3.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxslt","fixed_in":["1.1.32-150000.3.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxslt","fixed_in":["1.1.32-150000.3.28.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"libxslt-python","fixed_in":["1.1.32-150000.3.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libxslt","fixed_in":["1.1.28-17.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libxslt","fixed_in":["1.1.28-17.21.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"libxslt","fixed_in":["1.1.43-0.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libxslt","fixed_in":["1.1.43-4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-9"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.37-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.43-r0"},{"fixed":"1.1.43-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.43-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.37-r3"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.43-r0"},{"fixed":"1.1.43-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.43-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.35-1","1.1.35-1+deb12u1","1.1.35-1+deb12u2","1.1.35-1+deb12u3","1.1.35-1+deb12u4","1.1.35-1.1","1.1.35-1.2","1.1.35-2","1.1.39-0exp1","1.1.43-0.1","1.1.43-0.2","1.1.43-0.3","1.1.43-0exp1","1.1.45-0.1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.35-1.2","1.1.35-1.2+deb13u1","1.1.35-1.2+deb13u2","1.1.35-1.2+deb13u3","1.1.35-2","1.1.39-0exp1","1.1.43-0.1","1.1.43-0.2","1.1.43-0.3","1.1.43-0exp1","1.1.45-0.1"]},{"source":"osv","ecosystem":"Debian:14","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-0.3"}]}],"versions":["1.1.35-1.2","1.1.35-2","1.1.39-0exp1","1.1.43-0.1","1.1.43-0.2","1.1.43-0exp1"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-13.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.37-7.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-7.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-7.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-7.oe2403sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.45-0.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.45-0.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.45-0.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-slfo.1.1_5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.28.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxslt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-17.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-17.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.28-2","1.1.28-2build1","1.1.28-2ubuntu0.1","1.1.28-2ubuntu0.2","1.1.28-2ubuntu0.2+esm1","1.1.28-2ubuntu0.2+esm2","1.1.28-2ubuntu0.2+esm3","1.1.28-2ubuntu0.2+esm4","1.1.28-2ubuntu0.2+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.28-2build2","1.1.28-2.1","1.1.28-2.1ubuntu0.1","1.1.28-2.1ubuntu0.2","1.1.28-2.1ubuntu0.3","1.1.28-2.1ubuntu0.3+esm1","1.1.28-2.1ubuntu0.3+esm2","1.1.28-2.1ubuntu0.3+esm3","1.1.28-2.1ubuntu0.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.29-2.1ubuntu1","1.1.29-4","1.1.29-5","1.1.29-5ubuntu0.1","1.1.29-5ubuntu0.2","1.1.29-5ubuntu0.3","1.1.29-5ubuntu0.3+esm1","1.1.29-5ubuntu0.3+esm2","1.1.29-5ubuntu0.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.33-0ubuntu1","1.1.33-0ubuntu2","1.1.33-0ubuntu3","1.1.34-1","1.1.34-1ubuntu1","1.1.34-3","1.1.34-4","1.1.34-4ubuntu0.20.04.1","1.1.34-4ubuntu0.20.04.2","1.1.34-4ubuntu0.20.04.3","1.1.34-4ubuntu0.20.04.3+esm1","1.1.34-4ubuntu0.20.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.34-4","1.1.34-4build1","1.1.34-4build2","1.1.34-4ubuntu0.22.04.1","1.1.34-4ubuntu0.22.04.2","1.1.34-4ubuntu0.22.04.3","1.1.34-4ubuntu0.22.04.4","1.1.34-4ubuntu0.22.04.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.35-1","1.1.39-0exp1","1.1.39-0exp1build1","1.1.39-0exp1ubuntu0.24.04.1","1.1.39-0exp1ubuntu0.24.04.2","1.1.39-0exp1ubuntu0.24.04.3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.39-0exp1ubuntu4","1.1.43-0exp1","1.1.43-0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-0.3"}]}],"versions":["1.1.43-0.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-4.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1-1.1"}]}],"bundled":3}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift container platform 4"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:11015","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11731","tags":["vdb-entry","x_refsource_REDHAT","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2403688","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/151","tags":["report","article"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/78","tags":["fix","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11731","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-9f23-58rv-2hx4"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-11731","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11731.json","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-11731","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1724","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1725","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1726","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1727","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1728","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-7424","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10911","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11015.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379228","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-7424","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-7424","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/139","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2397838","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10911","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/144","tags":["article"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11731","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520892-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1250553","tags":["report"]},{"url":"https://bugzilla.suse.com/1251979","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11731","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520897-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521008-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521031-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253743-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253778-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253875-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260603-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-11731","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49825","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-11731","title":"Libxslt: type confusion in exsltfuncresultcompfunction of libxslt","description":"A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u003cfunc:result\u003e elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.","status":"published","published":"2025-10-14T06:02:35.519Z","modified":"2026-11-06T14:45:38.084Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-843"],"updated_at":"2026-11-06T15:28:32.799664Z"}],"euvd":[{"id":"EUVD-2025-34140","description":"A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u003cfunc:result\u003e elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.","status":"published","published":"2025-10-14T06:02:35Z","modified":"2026-11-06T14:45:38Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-06T16:05:20.373498Z"}],"ghsa":[{"id":"GHSA-9f23-58rv-2hx4","title":"A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u003cfunc...","description":"A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u003cfunc:result\u003e elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.","status":"published","published":"2025-10-14T06:31:13Z","modified":"2026-04-27T21:30:27Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-843"],"updated_at":"2026-11-02T15:07:39.979534Z"}],"nvd":[{"id":"CVE-2025-11731","description":"A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u003cfunc:result\u003e elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.","status":"published","published":"2025-10-14T06:15:34.483Z","modified":"2026-11-06T15:17:04.54Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-843"],"updated_at":"2026-11-06T18:00:50.729677Z"}],"osv":[{"id":"BELL-CVE-2025-11731","status":"published","published":"2025-10-15T06:04:42.669257Z","modified":"2026-09-06T07:15:11.3708193Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"CVE-2025-11731","title":"Libxslt: type confusion in exsltfuncresultcompfunction of libxslt","description":"A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u003cfunc:result\u003e elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.","status":"published","published":"2025-10-14T06:02:35.519Z","modified":"2026-11-08T02:30:26.234768168Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-843"],"updated_at":"2026-11-07T03:07:55.437794Z"},{"id":"DEBIAN-CVE-2025-11731","description":"A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u003cfunc:result\u003e elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.","status":"published","published":"2025-10-14T06:15:34.483Z","modified":"2026-11-07T09:47:35.735115198Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-07T10:14:19.880839Z"},{"id":"OESA-2026-1724","title":"libxslt security update","description":"Libxslt is the XSLT C library developed for the GNOME project\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u0026lt;func:result\u0026gt; elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.(CVE-2025-11731)","status":"published","published":"2026-03-27T11:10:45Z","modified":"2026-08-18T01:19:42.801165183Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1725","title":"libxslt security update","description":"Libxslt is the XSLT C library developed for the GNOME project\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u0026lt;func:result\u0026gt; elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.(CVE-2025-11731)","status":"published","published":"2026-03-27T11:10:45Z","modified":"2026-08-18T01:19:42.800939695Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1726","title":"libxslt security update","description":"Libxslt is the XSLT C library developed for the GNOME project\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u0026lt;func:result\u0026gt; elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.(CVE-2025-11731)","status":"published","published":"2026-03-27T11:10:45Z","modified":"2026-08-18T01:19:42.817487441Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1727","title":"libxslt security update","description":"Libxslt is the XSLT C library developed for the GNOME project\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u0026lt;func:result\u0026gt; elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.(CVE-2025-11731)","status":"published","published":"2026-03-27T11:10:45Z","modified":"2026-08-18T01:19:42.790513737Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1728","title":"libxslt security update","description":"Libxslt is the XSLT C library developed for the GNOME project\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u0026lt;func:result\u0026gt; elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.(CVE-2025-11731)","status":"published","published":"2026-03-27T11:10:45Z","modified":"2026-08-18T01:19:42.769832478Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"RHSA-2026:11015","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-28T10:08:07Z","modified":"2026-10-14T10:12:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"UBUNTU-CVE-2025-11731","description":"A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u003cfunc:result\u003e elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.","status":"published","published":"2025-10-14T06:15:00Z","modified":"2026-05-20T16:20:20.716039741Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:20.144818Z"},{"id":"AZL-70550","title":"CVE-2025-11731 affecting package libxslt for versions less than 1.1.34-9","description":"A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u003cfunc:result\u003e elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.","status":"published","published":"2025-10-14T06:15:34Z","modified":"2026-04-21T04:36:25.560675Z","updated_at":"2026-11-02T15:28:08.907584Z"},{"id":"AZL-70601","title":"CVE-2025-11731 affecting package libxslt for versions less than 1.1.43-3","description":"A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT \u003cfunc:result\u003e elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.","status":"published","published":"2025-10-14T06:15:34Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.144367Z"},{"id":"openSUSE-SU-2025:15641-1","title":"libexslt0-1.1.43-4.1 on GA media","description":"These are all security issues fixed in the libexslt0-1.1.43-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-10-16T00:00:00Z","modified":"2026-03-23T04:54:02.590386Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:20050-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\nChanges in libxslt:\n\n- CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979)\n- CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc#1250553)\n","status":"published","published":"2025-11-19T09:40:24Z","modified":"2026-03-23T04:54:16.335598Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:11147-1","title":"python-lxml-doc-6.1.1-1.1 on GA media","description":"These are all security issues fixed in the python-lxml-doc-6.1.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-29T00:00:00Z","modified":"2026-06-30T09:15:06.347602342Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"SUSE-SU-2025:20892-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n- CVE-2025-11731: type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979)\n- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)\n","status":"published","published":"2025-10-24T12:52:51Z","modified":"2026-03-23T04:47:09.450865Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20897-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n- CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979)\n- CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc#1250553)\n","status":"published","published":"2025-10-23T12:41:24Z","modified":"2026-03-23T04:49:09.34716Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:21008-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\nChanges in libxslt:\n\n- CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979)\n- CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc#1250553)\n","status":"published","published":"2025-11-19T09:41:09Z","modified":"2026-03-23T04:51:08.463911Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:21031-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\nChanges in libxslt:\n\n- CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979)\n- CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc#1250553)\n","status":"published","published":"2025-11-19T09:41:09Z","modified":"2026-03-23T04:50:18.717976Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:3743-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n  - CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function that could cause a denial of service (bsc#1251979)\n","status":"published","published":"2025-10-23T06:19:50Z","modified":"2026-02-04T02:51:25.441775Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3778-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n  - CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function that could cause a denial of service (bsc#1251979)\n","status":"published","published":"2025-10-24T13:26:07Z","modified":"2026-02-04T02:29:07.937799Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3875-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n  - CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function leading to denial of service (bsc#1251979)\n  - CVE-2025-10911: last fix caused a regression, patch was temporary disabled (bsc#1250553)\n","status":"published","published":"2025-10-30T15:27:08Z","modified":"2026-03-23T04:51:20.221316Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2026:0603-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n  - CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function leading to denial of service (bsc#1251979)\n  - CVE-2025-10911: last fix caused a regression, patch was temporary disabled (bsc#1250553)\n","status":"published","published":"2026-02-24T10:17:09Z","modified":"2026-03-23T04:52:23.356637Z","updated_at":"2026-11-02T15:54:00.846737Z"}]}}