CVE-2025-10911

EUVD-2025-31128
A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 5%
Debian logo
Debian Releases
Debian Product
Codename
libxslt
bookworm
postponed
bookworm (security)
vulnerable
bullseye
vulnerable
bullseye (security)
vulnerable
forky
1.1.45-0.1
fixed
sid
1.1.45-0.1
fixed
trixie
postponed
trixie (security)
vulnerable
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libxml2-2
suse enterprise desktop 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise sap 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise server 12 SP3
2.9.4-46.99.1
fixed
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
suse enterprise server 15 SP7
2.12.10-150700.4.11.1
fixed
libxml2-2-32bit
suse enterprise desktop 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise sap 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise server 12 SP3
2.9.4-46.99.1
fixed
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
suse enterprise server 15 SP7
2.12.10-150700.4.11.1
fixed
libxml2-devel
suse enterprise desktop 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise sap 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
suse enterprise server 15 SP7
2.12.10-150700.4.11.1
fixed
libxml2-doc
suse enterprise server 12 SP3
2.9.4-46.99.1
fixed
libxml2-tools
suse enterprise desktop 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise sap 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise server 12 SP3
2.9.4-46.99.1
fixed
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
suse enterprise server 15 SP7
2.12.10-150700.4.11.1
fixed
libxslt-devel
suse enterprise desktop 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise desktop 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise sap 15 SP4
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP4
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP7
1.1.34-150400.3.16.1
fixed
libxslt-tools
suse enterprise desktop 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise desktop 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise sap 15 SP4
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP4
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP7
1.1.34-150400.3.16.1
fixed
libxslt1
suse enterprise desktop 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise desktop 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise sap 15 SP4
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP4
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP7
1.1.34-150400.3.16.1
fixed
python-libxml2
suse enterprise server 12 SP3
2.9.4-46.99.1
fixed
python3-libxml2
suse enterprise desktop 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise sap 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
suse enterprise server 15 SP7
2.12.10-150700.4.11.1
fixed
python311-libxml2
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2026:11015
https://access.redhat.com/security/cve/CVE-2025-10911
https://bugzilla.redhat.com/show_bug.cgi?id=2397838
https://gitlab.gnome.org/GNOME/libxslt/-/issues/144
https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77