7.5High

CVE-2025-49795Libxml: null pointer dereference leads to denial of service (dos)

GNOME libxml2; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat JBoss Core Services 2.4.62.SP2; Red Hat Red Hat Hardened Images Published: 2025-06-16 18:19 (1 year ago)

Description

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.

Weakness (CWE): CWE-825

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
GNOME	libxml2	2.10.0 – < 2.14.5
Red Hat	Red Hat Enterprise Linux 10	all versions
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Hardened Images	all versions
Red Hat	Red Hat JBoss Core Services 2.4.62.SP2	—
Siemens	RUGGEDCOM RST2428P	< V4.0

References and patches

RHSA-2025:10630 vendor-advisory
RHSA-2025:19020 vendor-advisory
RHSA-2026:7519 vendor-advisory
https://access.redhat.com/security/cve/CVE-2025-49795 vdb-entry
RHBZ#2372379 issue-tracking
https://gitlab.gnome.org/GNOME/libxml2/-/issues/932
https://cert-portal.siemens.com/productcert/html/ssa-253495.html

CVSS score

7.5High

Source: redhat · CVSS 3.1

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

All scores (2)

cna	CVSS 3.1	7.5High
secalert@redhat.com	CVSS 3.1	7.5High

EPSS (chance of exploitation in 30 days)

0.62%

higher than 50% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: yes
Technical impact: partial

Timeline

ID reserved2025-06-10
Published2025-06-16 18:19
Reached IP-DB2026-10-25 00:01
Last updated2026-11-05 01:17

Assigned by (CNA): redhat
NVD status: Deferred

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — Red Hat Enterprise Linux

8.8High

CVE-2026-18379 7 hours ago

Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: path traversal via unsanitized repo name in addrepo/removerepo

Red Hat Red Hat Enterprise Linux 10

A flaw was found in yggdrasil-worker-package-manager. An authenticated attacker can exploit this issue to achieve arbitrary file modification or potential privilege escalation. The vulnerability exists because repository management operations fail to sanitize…

5.5Medium

CVE-2026-127101 8 hours ago