CVE-2025-7424

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-7424
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-7424.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-7424
Aliases
Downstream
Related
Published
2025-07-10T14:05:41.808Z
Modified
2026-07-11T03:55:32.257615788Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes
Details

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.

Database specific 
{
    "cna_assigner": "redhat",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7424.json",
    "cwe_ids": [
        "CWE-843"
    ]
}
References

Affected packages

Git / github.com/gnome/libxml2

Affected ranges

Type
GIT
Repo
https://github.com/gnome/libxml2
Events
Introduced
2189b59b1005976970ebadb65edbb289f9e091ff
Last affected
2189b59b1005976970ebadb65edbb289f9e091ff
Database specific 
{
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "6.0"
        },
        {
            "last_affected": "6.0"
        }
    ],
    "cpe": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*"
}
Type
GIT
Repo
https://gitlab.gnome.org/gnome/libxslt
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
bd558135ce9b4202fd66d3bb1154ca711a268328
Database specific 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.1.44"
        }
    ]
}

Affected versions

1.*
1.1.23
1.1.24
6.*
6.0
Other
CVE-2015-7995
LIBXML2_6_0
LIBXSLT_0_0_0
LIBXSLT_0_10_0
LIBXSLT_0_11_0
LIBXSLT_0_12_0
LIBXSLT_0_13_0
LIBXSLT_0_14_0
LIBXSLT_0_1_0
LIBXSLT_0_3_0
LIBXSLT_0_4_0
LIBXSLT_0_6_0
LIBXSLT_0_7_0
LIBXSLT_0_8_0
LIBXSLT_0_9_0
LIBXSLT_1_0_0
LIBXSLT_1_0_10
LIBXSLT_1_0_11
LIBXSLT_1_0_12
LIBXSLT_1_0_13
LIBXSLT_1_0_14
LIBXSLT_1_0_16
LIBXSLT_1_0_17
LIBXSLT_1_0_18
LIBXSLT_1_0_19
LIBXSLT_1_0_2
LIBXSLT_1_0_20
LIBXSLT_1_0_21
LIBXSLT_1_0_22
LIBXSLT_1_0_23
LIBXSLT_1_0_24
LIBXSLT_1_0_25
LIBXSLT_1_0_26
LIBXSLT_1_0_27
LIBXSLT_1_0_28
LIBXSLT_1_0_29
LIBXSLT_1_0_3
LIBXSLT_1_0_30
LIBXSLT_1_0_31
LIBXSLT_1_0_32
LIBXSLT_1_0_33
LIBXSLT_1_0_4
LIBXSLT_1_0_5
LIBXSLT_1_0_6
LIBXSLT_1_0_7
LIBXSLT_1_0_8
LIBXSLT_1_0_9
LIBXSLT_1_1_0
LIBXSLT_1_1_1
LIBXSLT_1_1_10
LIBXSLT_1_1_11
LIBXSLT_1_1_12
LIBXSLT_1_1_13
LIBXSLT_1_1_14
LIBXSLT_1_1_15
LIBXSLT_1_1_16
LIBXSLT_1_1_17
LIBXSLT_1_1_18
LIBXSLT_1_1_2
LIBXSLT_1_1_21
LIBXSLT_1_1_22
LIBXSLT_1_1_3
LIBXSLT_1_1_4
LIBXSLT_1_1_5
LIBXSLT_1_1_6
LIBXSLT_1_1_7
LIBXSLT_1_1_8
LIBXSLT_1_1_9
LIXSLT_0_5_0
v1.*
v1.1.25
v1.1.26
v1.1.27
v1.1.27-rc1
v1.1.28
v1.1.29
v1.1.29-rc1
v1.1.29-rc2
v1.1.30
v1.1.30-rc1
v1.1.30-rc2
v1.1.31
v1.1.31-rc1
v1.1.31-rc2
v1.1.32
v1.1.32-rc1
v1.1.32-rc2
v1.1.33
v1.1.33-rc1
v1.1.33-rc2
v1.1.34
v1.1.34-rc2
v1.1.35
v1.1.36
v1.1.37
v1.1.38
v1.1.39
v1.1.40
v1.1.41
v1.1.42
v1.1.43

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-7424.json"