← לוח פגיעויות

CVE-2025-6021

גבוהה 7.5

תיאור (מקור, אנגלית)

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

מדדים

CVSS 3.1
7.5 (HIGH) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS — סבירות ניצול
1% (אחוזון 100) נכון ל-20/9/2026
CWE
CWE-787

מוצרים מושפעים

xmlsoft: libxml2; redhat: jboss core services; redhat: openshift container platform; redhat: openshift container platform for arm64; redhat: openshift container platform for ibm z; redhat: openshift container platform for linuxone; redhat: openshift container platform for power; redhat: enterprise linux; redhat: enterprise linux eus; redhat: enterprise linux for arm 64; redhat: enterprise linux for arm 64 eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power little endian; redhat: enterprise linux for power little endian eus

קישורים