{"id":"CVE-2025-49795","state":"PUBLISHED","title":"Libxml: null pointer dereference leads to denial of service (dos)","description":"A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.","publishedAt":"2025-06-16T15:19:29.871Z","updatedAt":"2026-10-12T19:52:44.593Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"redhat"},"assigner":"redhat","products":["GNOME libxml2","Red Hat Red Hat Enterprise Linux 10","Red Hat Red Hat JBoss Core Services 2.4.62.SP2","Red Hat Red Hat Hardened Images","Red Hat Red Hat Enterprise Linux 6","Red Hat Red Hat Enterprise Linux 7","Red Hat Red Hat Enterprise Linux 8","Red Hat Red Hat Enterprise Linux 9"],"affected":[{"vendor":"GNOME","product":"libxml2","defaultStatus":"unaffected","versions":[{"version":"2.10.0","status":"affected","lessThan":"2.14.5","versionType":"semver"}],"repo":"https://gitlab.gnome.org/GNOME/libxml2/"},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.12.5-7.el10_0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.0"]},{"vendor":"Red Hat","product":"Red Hat JBoss Core Services 2.4.62.SP2","packageName":"libxml2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jboss_core_services:1.0"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","packageName":"libxml2-main","defaultStatus":"affected","versions":[{"version":"2.15.2-0.3.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"libxml2","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"libxml2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"libxml2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"libxml2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"]}],"references":["https://access.redhat.com/errata/RHSA-2025:10630","https://access.redhat.com/errata/RHSA-2025:19020","https://access.redhat.com/errata/RHSA-2026:7519","https://access.redhat.com/security/cve/CVE-2025-49795","https://bugzilla.redhat.com/show_bug.cgi?id=2372379","https://gitlab.gnome.org/GNOME/libxml2/-/issues/932","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"weaknesses":["CWE-825"],"ingestedAt":"2026-10-29T20:09:23.771Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/49xxx/CVE-2025-49795.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-49795","state":"PUBLISHED","datePublished":"2025-06-16T15:19:29.871Z","dateUpdated":"2026-10-12T19:52:44.593Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2025-06-10T22:17:05.286Z"},"containers":{"cna":{"title":"Libxml: null pointer dereference leads to denial of service (dos)","descriptions":[{"lang":"en","value":"A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service."}],"affected":[{"vendor":"GNOME","product":"libxml2","defaultStatus":"unaffected","versions":[{"version":"2.10.0","status":"affected","lessThan":"2.14.5","versionType":"semver"}],"repo":"https://gitlab.gnome.org/GNOME/libxml2/"},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"libxml2","defaultStatus":"affected","versions":[{"version":"0:2.12.5-7.el10_0","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.0"]},{"vendor":"Red Hat","product":"Red Hat JBoss Core Services 2.4.62.SP2","packageName":"libxml2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jboss_core_services:1.0"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","packageName":"libxml2-main","defaultStatus":"affected","versions":[{"version":"2.15.2-0.3.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"libxml2","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"libxml2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"libxml2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"libxml2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:9"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:10630","name":"RHSA-2025:10630","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:19020","name":"RHSA-2025:19020","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7519","name":"RHSA-2026:7519","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-49795","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372379","name":"RHBZ#2372379","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/932"}],"metrics":[{"other":{"content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-825","description":"Expired Pointer Dereference","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2026-10-12T19:52:44.593Z"},"datePublic":"2025-06-11T00:00:00.000Z","x_redhatCweChain":"CWE-825: Expired Pointer Dereference","workarounds":[{"lang":"en","value":"Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability."}],"timeline":[{"lang":"en","time":"2025-06-12T00:31:08.194Z","value":"Reported to Red Hat."},{"lang":"en","time":"2025-06-11T00:00:00.000Z","value":"Made public."}],"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-06-16T15:30:23.392664Z","id":"CVE-2025-49795","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-16T15:30:39.969Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V4.0","versionType":"custom"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html"}],"providerMetadata":{"shortName":"siemens-SADP","orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","dateUpdated":"2026-06-02T13:00:25.833Z"},"x_adpType":"supplier"}]}}}