CVE-2025-27113
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
- Update to 2.9.4+dfsg1-6.1ubuntu1.9+esm2
Published Updated
PatchFirst · Latest vulnerabilities
libxml2 vulnerabilities · Page 2
Vulnerabilities published for libxml2 in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 26
CVE-2025-24928
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.
- Update to 2.9.4+dfsg1-6.1ubuntu1.9+esm2
Published UpdatedCVE-2024-56171
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Update to 2.9.4+dfsg1-6.1ubuntu1.9+esm2
Published UpdatedCVE-2022-49043
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
- Update to 2.9.4+dfsg1-6.1ubuntu1.9+esm2
Published UpdatedCVE-2024-34459
An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.
- Update to 2.9.4+dfsg1-6.1ubuntu1.9+esm2
Published UpdatedCVE-2024-25062
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.
- Update to 2.9.4+dfsg1-6.1ubuntu1.9+esm1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.