CVE-2024-25062General(xmlsoft / libxml2)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

xmlsoft CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Other references

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

libxml2

Threat summary

1 mentions across 1 observed day

What's happening

General: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

xmlsoft

Products

libxml2

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://tinyurl.com/bdh26pfx

Full discourse1 post

Ferramentas Linux@Cezar_H_Linux246d
General
Just published: A technical deep-dive into the critical libxml2 vulnerability (CVE-2024-25062) impacting #OpenSUSE and the broader Linux ecosystem. Read more: 👉 https://tinyurl.com/bdh26pfx #Security https://t.co/Jcz28j9TvK
Post summary
The tweet links to a technical article on CVE‑2024‑25062 but provides no specific details, exploits, or mitigation information.
0001081
1.3K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	xmlsoft	libxml2	-	-	-

Explore more

Back to dashboard xmlsoft CVEs libxml2 vulnerabilities