CVE-2025-49794

ADVISORY - nist

Summary

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.

EPSS Score⁠: 0.00071 (0.217)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-825⁠

Expired Pointer Dereference

ADVISORY - redhat

CWE-825⁠

Expired Pointer Dereference

Impacted images

Advisories

Alpine

CREATED

5 months ago

UPDATED

8 days ago

ADVISORY IDCVE-2025-49794⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
alpine/libxml2	apk	alpine	3.21	<2.13.9-r0	2.13.9-r0
alpine/libxml2	apk	alpine	3.23	<2.13.9-r0	2.13.9-r0
alpine/libxml2	apk	alpine	3.24	<2.13.9-r0	2.13.9-r0
alpine/libxml2	apk	alpine	edge	<2.13.9-r0	2.13.9-r0
alpine/libxml2	apk	alpine	3.22	<2.13.9-r0	2.13.9-r0

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

8 months ago

UPDATED

18 days ago

ADVISORY IDCVE-2025-49794⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-825⁠

CVSS SCORE

9.1critical

Debian

CREATED

8 months ago

UPDATED

1 month ago

ADVISORY IDCVE-2025-49794⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

8 months ago

UPDATED

6 months ago

ADVISORY IDCVE-2025-49794⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Alma

CREATED

7 months ago

UPDATED

7 months ago

ADVISORY IDALSA-2025:10698⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Alma

CREATED

7 months ago

UPDATED

7 months ago

ADVISORY IDALSA-2025:10699⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Amazon

CREATED

7 months ago

UPDATED

6 months ago

ADVISORY IDALAS2-2025-2938⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Amazon

CREATED

7 months ago

UPDATED

6 months ago

ADVISORY IDALAS2023-2025-1103⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Red Hat

CREATED

8 months ago

UPDATED

1 month ago

ADVISORY IDCVE-2025-49794⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-825⁠

CVSS SCORE

9.1high

Rocky

CREATED

4 months ago

UPDATED

4 months ago

ADVISORY IDRLSA-2025:10630⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

6 months ago

UPDATED

6 months ago

ADVISORY IDRLSA-2025:10698⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

4 months ago

UPDATED

4 months ago

ADVISORY IDRLSA-2025:10699⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

7 months ago

UPDATED

7 months ago

ADVISORY IDELSA-2025-10630⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

7 months ago

UPDATED

7 months ago

ADVISORY IDELSA-2025-10698⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

7 months ago

UPDATED

7 months ago

ADVISORY IDELSA-2025-10699⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

6 months ago

UPDATED

6 months ago

ADVISORY IDELSA-2025-12240⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Photon

CREATED

7 months ago

UPDATED

5 months ago

ADVISORY ID

CVE-2025-49794

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

9.1critical