CVE Vulnerabilities

CVE-2025-49794

Expired Pointer Dereference

Published: Jun 16, 2025 | Modified: Jun 16, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
9.1 IMPORTANT
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Ubuntu
MEDIUM

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path=…/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the programs crash using libxml or other possible undefined behaviors.

Weakness

The product dereferences a pointer that contains a location for memory that was previously valid, but is no longer valid.

Potential Mitigations

References