Approved changes feed: RSS · Atom
cpe:2.3:a:libxml2:libxml2:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Libxml2 (13abb576-5f10-5884-ad01-e3f31bccf52e) |
|---|---|
| Product | Libxml2 (6773a113-87b6-555f-9044-ce8294bf1499) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9714 |
vulnerable | 2026-06-08 07:47:09.625745 |
Stack overflow in libxml2
MEDIUM (6.2)
Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.
Published: 2025-09-10T18:43:12.204Z
Updated: 2026-05-12T12:02:43.668Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-40896 |
vulnerable | 2026-06-08 06:43:53.533127 |
Details available
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.
Published: 2024-12-23T00:00:00.000Z
Updated: 2025-02-28T13:07:30.165Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.