CVE-2025-32414
EUVD-2025-1044008.04.2025, 03:15
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| xmlsoft | libxml2 | 𝑥 < 2.13.8 |
| xmlsoft | libxml2 | 2.14.0 ≤ 𝑥 < 2.14.2 |
𝑥
= Vulnerable software versions
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libxml2-2 |
| ||||||||||||||||
| libxml2-2-32bit |
| ||||||||||||||||
| libxml2-devel |
| ||||||||||||||||
| libxml2-doc |
| ||||||||||||||||
| libxml2-tools |
| ||||||||||||||||
| python-libxml2 |
| ||||||||||||||||
| python3-libxml2 |
| ||||||||||||||||
| python311-libxml2 |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libxml2 |
| ||||||||||||||||||
| libxml2-devel |
| ||||||||||||||||||
| python3-libxml2 |
|
Common Weakness Enumeration
- CWE-393 - Return of Wrong Status CodeA function or operation returns an incorrect return value or status code that does not indicate an error, but causes the product to modify its behavior based on the incorrect result.
- CWE-252 - Unchecked Return ValueThe software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.