{"id":"CVE-2025-7424","aliases":["AZL-65367","AZL-65406","BELL-CVE-2025-7424","BIT-java-2025-7424","BIT-java-min-2025-7424","BIT-jre-2025-7424","CLSA-2025-1765288229","DEBIAN-CVE-2025-7424","DLA-4309-1","DSA-5979-1","EUVD-2025-20995","GHSA-w4gx-392p-5m58","MGASA-2025-0269","OESA-2025-1931","RHBA-2025:12345","RHSA-2026:11015","ROOT-OS-DEBIAN-12-CVE-2025-7424","SUSE-SU-2025:20556-1","SUSE-SU-2025:20661-1","UBUNTU-CVE-2025-7424","USN-7945-1","openSUSE-SU-2025:15364-1","openSUSE-SU-2026:11147-1"],"status":"published","title":"Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01301,"percentile":0.70655,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-843"],"published":"2025-07-10T14:05:41Z","modified":"2026-11-05T21:15:57Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libxslt","fixed_in":["1.1.34-10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libxslt","fixed_in":["1.1.43-3"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java","fixed_in":["1.8.0","8.0.481"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java-min","fixed_in":["1.8.0","8.0.481"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"jre","fixed_in":["1.8.0","8.0.481"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxslt","fixed_in":["1.1.34-13.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxslt-devel","fixed_in":["1.1.34-13.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxslt","fixed_in":["1.1.35-1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxslt","fixed_in":["1.1.35-1.2+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxslt","fixed_in":["1.1.35-2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"libxslt","fixed_in":["1.1.39-5.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"libxslt","fixed_in":["1.1.39-5.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"libxslt","fixed_in":["1.1.39-5.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libxslt","fixed_in":["1.1.34-8.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"libxslt","fixed_in":["1.1.37-3.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libxslt","fixed_in":["1.1.37-3.oe2203sp4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"libxslt","fixed_in":["1.1.38-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"libxslt","fixed_in":["1.1.38-slfo.1.1_4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxslt","fixed_in":["1.1.28-2ubuntu0.2+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxslt","fixed_in":["1.1.28-2.1ubuntu0.3+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxslt","fixed_in":["1.1.29-5ubuntu0.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxslt","fixed_in":["1.1.34-4ubuntu0.20.04.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxslt","fixed_in":["1.1.34-4ubuntu0.22.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libxslt","fixed_in":["1.1.39-0exp1ubuntu0.24.04.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libxslt","fixed_in":["1.1.43-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.481"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.481"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.481"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-13.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-13.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1+deb12u2"}]}],"versions":["1.1.35-1","1.1.35-1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1.2+deb13u1"}]}],"versions":["1.1.35-1.2"]},{"source":"osv","ecosystem":"Debian:14","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-2"}]}],"versions":["1.1.35-1.2"]},{"source":"osv","ecosystem":"Debian:11","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4+deb11u3"}]}],"versions":["1.1.34-4","1.1.34-4+deb11u1","1.1.34-4+deb11u2"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1+deb12u2"}]}],"versions":["1.1.35-1","1.1.35-1+deb12u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:13","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1.2+deb13u1"}]}],"versions":["1.1.35-1.2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-1.8.mga9"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:9","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-1.2.mga9"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-5.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-5.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-5.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-8.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.37-3.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.37-3.oe2203sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.39-8.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.39-8.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.39-8.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.39-8.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.45-0.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.45-0.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.45-0.1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-slfo.1.1_4.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2ubuntu0.2+esm5"}]}],"versions":["1.1.28-2","1.1.28-2build1","1.1.28-2ubuntu0.1","1.1.28-2ubuntu0.2","1.1.28-2ubuntu0.2+esm1","1.1.28-2ubuntu0.2+esm2","1.1.28-2ubuntu0.2+esm3","1.1.28-2ubuntu0.2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2.1ubuntu0.3+esm4"}]}],"versions":["1.1.28-2build2","1.1.28-2.1","1.1.28-2.1ubuntu0.1","1.1.28-2.1ubuntu0.2","1.1.28-2.1ubuntu0.3","1.1.28-2.1ubuntu0.3+esm1","1.1.28-2.1ubuntu0.3+esm2","1.1.28-2.1ubuntu0.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-5ubuntu0.3+esm3"}]}],"versions":["1.1.29-2.1ubuntu1","1.1.29-4","1.1.29-5","1.1.29-5ubuntu0.1","1.1.29-5ubuntu0.2","1.1.29-5ubuntu0.3","1.1.29-5ubuntu0.3+esm1","1.1.29-5ubuntu0.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.20.04.3+esm2"}]}],"versions":["1.1.33-0ubuntu1","1.1.33-0ubuntu2","1.1.33-0ubuntu3","1.1.34-1","1.1.34-1ubuntu1","1.1.34-3","1.1.34-4","1.1.34-4ubuntu0.20.04.1","1.1.34-4ubuntu0.20.04.2","1.1.34-4ubuntu0.20.04.3","1.1.34-4ubuntu0.20.04.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.22.04.5"}]}],"versions":["1.1.34-4","1.1.34-4build1","1.1.34-4build2","1.1.34-4ubuntu0.22.04.1","1.1.34-4ubuntu0.22.04.2","1.1.34-4ubuntu0.22.04.3","1.1.34-4ubuntu0.22.04.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-0exp1ubuntu0.24.04.3"}]}],"versions":["1.1.35-1","1.1.39-0exp1","1.1.39-0exp1build1","1.1.39-0exp1ubuntu0.24.04.1","1.1.39-0exp1ubuntu0.24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2ubuntu0.2+esm5"}]}],"versions":["1.1.28-2","1.1.28-2build1","1.1.28-2ubuntu0.1","1.1.28-2ubuntu0.2","1.1.28-2ubuntu0.2+esm1","1.1.28-2ubuntu0.2+esm2","1.1.28-2ubuntu0.2+esm3","1.1.28-2ubuntu0.2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2.1ubuntu0.3+esm4"}]}],"versions":["1.1.28-2build2","1.1.28-2.1","1.1.28-2.1ubuntu0.1","1.1.28-2.1ubuntu0.2","1.1.28-2.1ubuntu0.3","1.1.28-2.1ubuntu0.3+esm1","1.1.28-2.1ubuntu0.3+esm2","1.1.28-2.1ubuntu0.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-5ubuntu0.3+esm3"}]}],"versions":["1.1.29-2.1ubuntu1","1.1.29-4","1.1.29-5","1.1.29-5ubuntu0.1","1.1.29-5ubuntu0.2","1.1.29-5ubuntu0.3","1.1.29-5ubuntu0.3+esm1","1.1.29-5ubuntu0.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.20.04.3+esm2"}]}],"versions":["1.1.33-0ubuntu1","1.1.33-0ubuntu2","1.1.33-0ubuntu3","1.1.34-1","1.1.34-1ubuntu1","1.1.34-3","1.1.34-4","1.1.34-4ubuntu0.20.04.1","1.1.34-4ubuntu0.20.04.2","1.1.34-4ubuntu0.20.04.3","1.1.34-4ubuntu0.20.04.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.22.04.5"}]}],"versions":["1.1.34-4","1.1.34-4build1","1.1.34-4build2","1.1.34-4ubuntu0.22.04.1","1.1.34-4ubuntu0.22.04.2","1.1.34-4ubuntu0.22.04.3","1.1.34-4ubuntu0.22.04.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-0exp1ubuntu0.24.04.3"}]}],"versions":["1.1.35-1","1.1.39-0exp1","1.1.39-0exp1build1","1.1.39-0exp1ubuntu0.24.04.1","1.1.39-0exp1ubuntu0.24.04.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.1-1.1"}]}],"bundled":3}],"products":[{"vendor":"gnome","product":"libxslt"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"openshift_container_platform"},{"vendor":"xmlsoft","product":"libxslt"}],"references":[{"url":"https://access.redhat.com/errata/RHBA-2025:12345","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:11015","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-7424","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379228","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/139","tags":["web","report","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00024.html","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Aug/0","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/37","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/35","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/33","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/32","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/30","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/07/11/2","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-7424","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-w4gx-392p-5m58"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-7424","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2025-1765288229.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7424.json","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-7424","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0269.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34378","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/06/16/6","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2025/07/11/2","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1931","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_12345.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-7424","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-7425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379274","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-7425","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-7425","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/140","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10911","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11731","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11015.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2397838","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10911","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/144","tags":["article"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2403688","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11731","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11731","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/151","tags":["article"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/78","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520556-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1246360","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7424","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520661-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-7424","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7945-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49825","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-7424","title":"Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2025-07-10T14:05:41.808Z","modified":"2026-11-04T21:45:11.776Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-843"],"updated_at":"2026-11-04T22:39:14.734949Z"}],"euvd":[{"id":"EUVD-2025-20995","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2025-07-10T14:05:41Z","modified":"2026-11-04T21:45:11Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-04T23:47:19.24864Z"}],"ghsa":[{"id":"GHSA-w4gx-392p-5m58","title":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet...","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2025-07-10T15:31:28Z","modified":"2026-04-27T21:31:33Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-843"],"updated_at":"2026-11-02T15:07:39.979534Z"}],"nvd":[{"id":"CVE-2025-7424","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2025-07-10T14:15:27.573Z","modified":"2026-11-04T22:17:39.703Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-843"],"updated_at":"2026-11-04T23:43:37.864413Z"}],"osv":[{"id":"BELL-CVE-2025-7424","status":"published","published":"2025-07-11T06:00:41.9762Z","modified":"2026-09-06T07:15:24.575940747Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:22.77042Z"},{"id":"CVE-2025-7424","title":"Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2025-07-10T14:05:41.808Z","modified":"2026-11-05T21:15:57.151013757Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-843"],"updated_at":"2026-11-05T22:01:21.792402Z"},{"id":"DEBIAN-CVE-2025-7424","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2025-07-10T14:15:27.573Z","modified":"2026-11-05T09:47:37.49732772Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"OESA-2025-1931","title":"libxslt security update","description":"Libxslt is the XSLT C library developed for the GNOME project\r\n\r\nSecurity Fix(es):\n\nA vulnerability classified as problematic was found in libxslt (the affected version is unknown).The manipulation of the argument psvi with an unknown input leads to a unknown weakness. The CWE definition for the vulnerability is CWE-843. The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.As an impact it is known to affect integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-7424)","status":"published","published":"2025-08-01T11:09:01Z","modified":"2026-08-18T01:18:34.57009767Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"RHBA-2025:12345","title":"Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement update","status":"published","published":"2026-04-15T10:03:44Z","modified":"2026-10-14T10:47:37.183119478Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2026:11015","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-28T10:08:07Z","modified":"2026-10-14T10:12:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"UBUNTU-CVE-2025-7424","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2025-07-10T14:15:00Z","modified":"2026-04-22T16:16:33.267489Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:55.926217Z"},{"id":"AZL-65367","title":"CVE-2025-7424 affecting package libxslt for versions less than 1.1.34-10","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2025-07-10T14:15:27Z","modified":"2026-04-21T04:37:35.092704Z","updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"AZL-65406","title":"CVE-2025-7424 affecting package libxslt for versions less than 1.1.43-3","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2025-07-10T14:15:27Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.66471Z"},{"id":"BIT-java-2025-7424","title":"Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2026-05-06T14:45:48.138Z","modified":"2026-09-08T08:48:00.318426238Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-java-min-2025-7424","title":"Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2026-05-06T14:45:50.235Z","modified":"2026-09-08T08:47:56.396779299Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2025-7424","title":"Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes","description":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.","status":"published","published":"2026-05-08T05:47:30.5Z","modified":"2026-09-08T08:48:05.916102736Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"CLSA-2025-1765288229","title":"libxslt: Fix of CVE-2025-7424","description":"- CVE-2025-7424: fix type confusion in xsltDocumentFunctionLoadDocument","status":"published","published":"2025-12-09T13:50:32Z","modified":"2026-06-01T00:32:36.765911589Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"DLA-4309-1","title":"libxslt - security update","status":"published","published":"2025-09-25T00:00:00Z","modified":"2025-09-25T10:31:57.312294Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5979-1","title":"libxslt - security update","status":"published","published":"2025-08-19T00:00:00Z","modified":"2026-03-09T02:09:46.227639Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0269","title":"Updated libxml2 \u0026 libxslt packages fix security vulnerabilities","description":"Heap use after free (UAF) leads to Denial of service (DoS).\n(CVE-2025-49794)\nNull pointer dereference leads to Denial of service (DoS).\n(CVE-2025-49795)\nType confusion leads to Denial of service (DoS). (CVE-2025-49796)\nInteger Overflow Leading to Buffer Overflow in xmlBuildQName().\n(CVE-2025-6021)\nStack-based Buffer Overflow in xmllint Shell. (CVE-2025-6170)\nType confusion in xmlNode.psvi between stylesheet and source nodes.\n(CVE-2025-7424)\nHeap-use-after-free in xmlFreeID caused by `atype` corruption.\n(CVE-2025-7425)\n","status":"published","published":"2025-11-09T07:52:10Z","modified":"2026-04-16T04:44:01.959141776Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15364-1","title":"libexslt0-1.1.43-2.1 on GA media","description":"These are all security issues fixed in the libexslt0-1.1.43-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-20T00:00:00Z","modified":"2026-03-23T04:53:41.635639Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:11147-1","title":"python-lxml-doc-6.1.1-1.1 on GA media","description":"These are all security issues fixed in the python-lxml-doc-6.1.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-29T00:00:00Z","modified":"2026-06-30T09:15:06.347602342Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-7424","title":"CVE-2025-7424 in rootio-libxslt - Patched by Root","description":"Root has patched CVE-2025-7424 in the rootio-libxslt package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2025-08-12T08:24:43Z","modified":"2026-08-26T02:10:22.967981164Z","updated_at":"2026-11-02T15:53:31.773105Z"},{"id":"SUSE-SU-2025:20556-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n- CVE-2025-7424: Fixed type confusion in xmlNode.psvi between \n  stylesheet and source nodes (bsc#1246360)\n","status":"published","published":"2025-08-14T09:20:44Z","modified":"2026-03-23T04:50:11.618385Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20661-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n- CVE-2025-7424: Type confusion in xmlNode.psvi between stylesheet and source nodes [bsc#1246360]\n","status":"published","published":"2025-08-29T07:49:11Z","modified":"2026-03-23T04:50:12.993438Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7945-1","title":"libxslt vulnerability","description":"Ivan Fratric discovered that Libxslt was vulnerable to type confusion when\nperforming XML transformations. An attacker could possibly use this issue\nto cause Libxslt to crash or corrupt memory, causing a denial of service or\nundefined behavior.","status":"published","published":"2026-01-07T13:06:15Z","modified":"2026-06-25T13:32:31.590283097Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}