Approved changes feed: RSS · Atom
cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Xmlsoft (be3c3366-cde4-54a5-8785-eb1f04df6881) |
|---|---|
| Product | Libxslt (9dcdf0d8-a99c-518f-887f-5cc8a5a57af8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/coapp-packages/libxslt |
purl2cpe | 2026-06-01 10:12:19.483750 |
pkg:github/gnome/libxslt |
purl2cpe | 2026-06-01 10:12:19.483752 |
pkg:gitlab/redhat/libxslt |
purl2cpe | 2026-06-01 10:12:19.483754 |
pkg:nuget/libxslt |
purl2cpe | 2026-06-01 10:12:19.483755 |
pkg:rpm/fedora/libxslt |
purl2cpe | 2026-06-01 10:12:19.483756 |
pkg:rpm/opensuse/libxslt |
purl2cpe | 2026-06-01 10:12:19.483758 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-24855 |
vulnerable | 2026-06-08 07:12:50.080015 |
Details available
HIGH (7.8)
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.
Published: 2025-03-14T00:00:00.000Z
Updated: 2026-02-26T19:09:31.574Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-55549 |
vulnerable | 2026-06-08 06:54:17.064904 |
Details available
HIGH (7.8)
xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.
Published: 2025-03-14T00:00:00.000Z
Updated: 2025-11-03T20:48:48.086Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29824 |
vulnerable | 2026-06-08 05:42:48.872214 |
Details available
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.
Published: 2022-05-03T00:00:00.000Z
Updated: 2024-08-03T06:33:42.645Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30560 |
vulnerable | 2026-06-08 05:31:51.143356 |
Details available
Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Published: 2021-08-03T00:00:00.000Z
Updated: 2025-05-05T16:53:12.984Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5815 |
vulnerable | 2026-06-08 05:14:08.134601 |
Details available
Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.
Published: 2019-12-11T00:55:15.000Z
Updated: 2024-08-04T20:09:23.328Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11068 |
vulnerable | 2026-06-08 05:12:34.954696 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4610 |
vulnerable | 2026-06-08 05:07:55.050996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4609 |
vulnerable | 2026-06-08 05:07:55.050259 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4608 |
vulnerable | 2026-06-08 05:07:55.049504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4607 |
vulnerable | 2026-06-08 05:07:55.045893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1684 |
vulnerable | 2026-06-08 05:07:31.956725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1683 |
vulnerable | 2026-06-08 05:07:31.955788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9019 |
vulnerable | 2026-06-08 05:07:05.870650 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7995 |
vulnerable | 2026-06-08 05:07:02.739191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4520 |
vulnerable | 2026-06-08 05:04:47.755931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6139 |
vulnerable | 2026-06-08 05:02:59.682968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2870 |
vulnerable | 2026-06-08 05:02:06.846072 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3970 |
vulnerable | 2026-06-08 04:59:28.429419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1202 |
vulnerable | 2026-06-08 04:57:56.832386 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.