libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables

🗓️ 14 Aug 2025 13:51:01Reported by RedHatType

Libxml2 out-of-bounds read triggers heap underflow during schema validation with identity constraints, causing crash and denial of service.

Reporter	Title	Published	Views	Family All 282
IBM Security Bulletins	Security Bulletin: Vulnerability in libxml2 library (CVE-2025-32415) affects Power HMC.	19 Nov 202508:45	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to the libxml2 package (CVE-2025-27113, CVE-2025-32414, CVE-2025-32415)	2 Sep 202514:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	5 Sep 202519:04	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in libxml2 affects IBM Netezza Appliance	17 Dec 202513:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	7 Nov 202516:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in libxml2 affect AIX/VIOS	4 Jun 202515:05	–	ibm
Tenable Nessus	Amazon Linux 2023 : libxml2, libxml2-devel, libxml2-static (ALAS2023-2025-963)	13 May 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libxml2 (ALAS-2025-2860)	29 May 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0136: libxml2 (ALINUX3-SA-2025:0136)	12 Aug 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libxml2 (ALSA-2025:13203)	6 Aug 202500:00	–	nessus

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-32415
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
gitlab	www.gitlab.gnome.org/GNOME/libxml2/-/issues/890
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-32415
cve	www.cve.org/CVERecord

21 Aug 2026 17:08Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.12.9 - 7.5

EPSS0.00601

SSVC