Back to CVE records
Critical 9.1Published Jun 16, 2025
CVE-2025-49794Libxml: heap use after free (uaf) leads to denial of service (dos)
Updated under an hour ago ()
Does this affect you?
It affects Red Hat Enterprise Linux 10 and 27 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.
- CVSS
- 9.1 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- Weakness (CWE)
- CWE-825
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- redhat
- NVD analysis
- Deferred
- Record last updated
- Oct 12, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Red Hat Red Hat Enterprise Linux 10 redhat:enterprise_linux | from 0:2.12.5-7.el10_0 not affected | CNA record |
from 0:2.9.1-6.el7_9.10 not affected | CNA record | |
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support redhat:rhel_aus | from 0:2.9.7-9.el8_2.3 not affected | CNA record |
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support redhat:rhel_eus_long_life | from 0:2.9.7-9.el8_4.6 not affected | CNA record |
from 0:2.9.7-13.el8_6.10 not affected | CNA record | |
from 0:2.9.7-13.el8_6.10 not affected | CNA record | |
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support redhat:rhel_eus | from 0:2.9.13-10.el9_4 not affected | CNA record |
Red Hat Red Hat JBoss Core Services 2.4.62.SP2 redhat:jboss_core_services | 1.0 | CNA record |
Red Hat Red Hat OpenShift Container Platform 4.12 redhat:openshift | from 412.86.202510291903-0 not affected | CNA record |
Red Hat Red Hat Web Terminal 1.11 on RHEL 9 redhat:webterminal | from 1.11-19 not affected | CNA record |
Red Hat RHOSS-1.36-RHEL-8 redhat:openshift_serverless | from 1.36.0-11 not affected | CNA record |
Red Hat cert-manager operator for Red Hat OpenShift 1.16 redhat:cert_manager | from v1.16.5-1760515757 not affected | CNA record |
Red Hat OpenShift File Integrity Operator - FIO 1 redhat:openshift_file_integrity_operator | from v1.3 not affected | CNA record |
Red Hat Red Hat Hardened Images redhat:hummingbird | from 2.15.2-0.3.hum1 not affected | CNA record |
Red Hat Red Hat Insights proxy 1.5 redhat:insights_proxy | from 1.5.5-1754504343 not affected | CNA record |
Red Hat Red Hat 3scale API Management Platform 2 redhat:red_hat_3scale_amp | 2 | CNA record |
Siemens RUGGEDCOM ROX MX5000 siemens:ruggedcom_rox_mx5000 (from the name) | before V2.17.1 | CISA ADP |
Siemens RUGGEDCOM ROX MX5000RE siemens:ruggedcom_rox_mx5000re (from the name) | before V2.17.1 | CISA ADP |
Siemens RUGGEDCOM ROX RX1400 siemens:ruggedcom_rox_rx1400 (from the name) | before V2.17.1 | CISA ADP |
Siemens RUGGEDCOM ROX RX1500 siemens:ruggedcom_rox_rx1500 (from the name) | before V2.17.1 | CISA ADP |
Siemens RUGGEDCOM ROX RX1501 siemens:ruggedcom_rox_rx1501 (from the name) | before V2.17.1 | CISA ADP |
Siemens RUGGEDCOM ROX RX1510 siemens:ruggedcom_rox_rx1510 (from the name) | before V2.17.1 | CISA ADP |
Siemens RUGGEDCOM ROX RX1511 siemens:ruggedcom_rox_rx1511 (from the name) | before V2.17.1 | CISA ADP |
Siemens RUGGEDCOM ROX RX1512 siemens:ruggedcom_rox_rx1512 (from the name) | before V2.17.1 | CISA ADP |
Siemens RUGGEDCOM ROX RX1524 siemens:ruggedcom_rox_rx1524 (from the name) | before V2.17.1 | CISA ADP |
Siemens RUGGEDCOM ROX RX1536 siemens:ruggedcom_rox_rx1536 (from the name) | before V2.17.1 | CISA ADP |
Siemens RUGGEDCOM ROX RX5000 siemens:ruggedcom_rox_rx5000 (from the name) | before V2.17.1 | CISA ADP |
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name) | before V4.0 | CISA ADP |
References
- https://access.redhat.com/errata/RHSA-2025:10630vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:10698vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:10699vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:11580vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:12098vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:12099vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:12199vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:12237vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:12239vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:12240vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:12241vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:13335vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:15397vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:15827vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:15828vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:18217vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:18218vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:18219vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:18240vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:19020vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:19041vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:19046vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:19894vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:21913vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2026:0934vendor-advisory, x-refsource-redhat
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.