CVE-2025-10911

EUVD-2025-31128
A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 5.99%
Debian logo
Debian Releases
Debian Product
Codename
libxslt
bookworm
postponed
bookworm (security)
vulnerable
forky
1.1.45-0.1
fixed
sid
1.1.45-0.1
fixed
trixie
postponed
trixie (security)
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libxslt
bionic
deferred
focal
deferred
jammy
deferred
noble
deferred
plucky
ignored
questing
ignored
resolute
Fixed 1.1.43-0.3
released
trusty
deferred
xenial
deferred
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libxml2-2
suse enterprise desktop 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise sap 12 SP5
2.9.4-46.99.1
fixed
suse enterprise sap 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise server 12 SP3
2.9.4-46.99.1
fixed
suse enterprise server 12 SP5
2.9.4-46.99.1
fixed
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
suse enterprise server 15 SP7
2.12.10-150700.4.11.1
fixed
libxml2-2-32bit
suse enterprise desktop 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise sap 12 SP5
2.9.4-46.99.1
fixed
suse enterprise sap 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise server 12 SP3
2.9.4-46.99.1
fixed
suse enterprise server 12 SP5
2.9.4-46.99.1
fixed
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
suse enterprise server 15 SP7
2.12.10-150700.4.11.1
fixed
libxml2-devel
suse enterprise desktop 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise sap 12 SP5
2.9.4-46.99.1
fixed
suse enterprise sap 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise server 12 SP5
2.9.4-46.99.1
fixed
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
suse enterprise server 15 SP7
2.12.10-150700.4.11.1
fixed
libxml2-doc
suse enterprise sap 12 SP5
2.9.4-46.99.1
fixed
suse enterprise server 12 SP3
2.9.4-46.99.1
fixed
suse enterprise server 12 SP5
2.9.4-46.99.1
fixed
libxml2-tools
suse enterprise desktop 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise sap 12 SP5
2.9.4-46.99.1
fixed
suse enterprise sap 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise server 12 SP3
2.9.4-46.99.1
fixed
suse enterprise server 12 SP5
2.9.4-46.99.1
fixed
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
suse enterprise server 15 SP7
2.12.10-150700.4.11.1
fixed
libxslt-devel
suse enterprise desktop 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise desktop 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise sap 15 SP4
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP4
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP7
1.1.34-150400.3.16.1
fixed
libxslt-tools
suse enterprise desktop 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise desktop 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise sap 15 SP4
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP4
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP7
1.1.34-150400.3.16.1
fixed
libxslt1
suse enterprise desktop 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise desktop 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise sap 15 SP4
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise sap 15 SP7
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP4
1.1.34-150400.3.16.1
fixed
suse enterprise server 15 SP5
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP6
1.1.34-150400.3.13.1
fixed
suse enterprise server 15 SP7
1.1.34-150400.3.16.1
fixed
python-libxml2
suse enterprise sap 12 SP5
2.9.4-46.99.1
fixed
suse enterprise server 12 SP3
2.9.4-46.99.1
fixed
suse enterprise server 12 SP5
2.9.4-46.99.1
fixed
python3-libxml2
suse enterprise desktop 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise sap 15 SP7
2.12.10-150700.4.11.1
fixed
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
suse enterprise server 15 SP7
2.12.10-150700.4.11.1
fixed
python311-libxml2
suse enterprise server 15 SP4
2.9.14-150400.5.55.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
libxslt
RHEL 8
0:1.1.32-6.4.el8_10
fixed
RHEL 8.4 AUS
0:1.1.32-8.el8_4.1
fixed
RHEL 8.6 AUS
0:1.1.32-8.el8_6.1
fixed
RHEL 8.8 E4S
0:1.1.32-8.el8_8.1
fixed
RHEL 8.8 TUS
0:1.1.32-8.el8_8.1
fixed
RHEL 9
0:1.1.34-14.el9_8.1
fixed
libxslt-devel
RHEL 8
0:1.1.32-6.4.el8_10
fixed
RHEL 8.4 AUS
0:1.1.32-8.el8_4.1
fixed
RHEL 8.6 AUS
0:1.1.32-8.el8_6.1
fixed
RHEL 8.8 E4S
0:1.1.32-8.el8_8.1
fixed
RHEL 8.8 TUS
0:1.1.32-8.el8_8.1
fixed
RHEL 9
0:1.1.34-14.el9_8.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
libxslt
Amazon Linux 2023
0:1.1.43-1.amzn2023.0.3
fixed
libxslt-debuginfo
Amazon Linux 2023
0:1.1.43-1.amzn2023.0.3
fixed
libxslt-debugsource
Amazon Linux 2023
0:1.1.43-1.amzn2023.0.3
fixed
libxslt-devel
Amazon Linux 2023
0:1.1.43-1.amzn2023.0.3
fixed
python3-libxslt
Amazon Linux 2023
0:1.1.43-1.amzn2023.0.3
fixed
python3-libxslt-debuginfo
Amazon Linux 2023
0:1.1.43-1.amzn2023.0.3
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2026:11015
https://access.redhat.com/errata/RHSA-2026:26355
https://access.redhat.com/errata/RHSA-2026:28243
https://access.redhat.com/errata/RHSA-2026:28584
https://access.redhat.com/errata/RHSA-2026:29807
https://access.redhat.com/errata/RHSA-2026:29809
https://access.redhat.com/errata/RHSA-2026:29811
https://access.redhat.com/errata/RHSA-2026:29814
https://access.redhat.com/errata/RHSA-2026:29975
https://access.redhat.com/errata/RHSA-2026:29976
https://access.redhat.com/errata/RHSA-2026:30847
https://access.redhat.com/errata/RHSA-2026:33313
https://access.redhat.com/errata/RHSA-2026:44481
https://access.redhat.com/errata/RHSA-2026:58981
https://access.redhat.com/errata/RHSA-2026:74674
https://access.redhat.com/security/cve/CVE-2025-10911
https://bugzilla.redhat.com/show_bug.cgi?id=2397838
https://gitlab.gnome.org/GNOME/libxslt/-/issues/144
https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77