GHSA-JV72-59WQ-8RXM libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

NULL Pointer Dereference

Overview libxmljs is a libxml bindings for v8 javascript engine Affected versions of this package are vulnerable to NULL Pointer Dereference in the parsing process of specially crafted XML documents when accessing the ref property on entityref and entitydecl nodes. An attacker can cause a...

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

boost:boost_regex_pattern_fuzzer: Segv on unknown address in boost::re_detail_600::basic_regex_creator<char, boost::regex_traits<char, boost:

Detailed Report: https://oss-fuzz.com/testcase?key=4900718306983936 Project: boost Fuzzing Engine: honggfuzz Fuzz Target: boostregexpatternfuzzer Job Type: honggfuzzasanboost Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

PT-2025-53592

Name of the Vulnerable Software and Affected Versions libxmljs version 1.0.11 Description A flaw exists in libxmljs when processing a specifically designed XML document. Accessing the internal ref property on entity ref and entity decl nodes can result in a segmentation fault, potentially causing...

CVE-2025-25341

The libxmljs library (specifically version 1.0.11 ) contains a NULL Pointer Dereference vulnerability during the parsing of specially crafted XML documents. The root cause is improper handling of the internal _ref property on entity_ref and entity_decl nodes, which can trigger a segmentation faul...

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

EUVD-2025-205443

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

CVE-2025-25341: Uncontrolled Resource Consumption

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

Linux Distros Unpatched Vulnerability : CVE-2023-54132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: stop parsing non-compact HEAD index if clusterofs is invalid Syzbot generated a crafted image 1 with a non-compact HEAD index of clusterofs 33024 while...

shaderc:glslc_fuzzer: Segv on unknown address in glslang::TIntermediate::getOffset

Project: https://github.com/google/shaderc.git Detailed Report: https://oss-fuzz.com/testcase?key=6612748441288704 Project: shaderc Fuzzing Engine: libFuzzer Fuzz Target: glslcfuzzer Job Type: libfuzzerasanshaderc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

CVE-2022-50700

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: Delay the unmapping of the buffer On WCN3990, we are seeing a rare scenario where copy engine hardware is sending a copy complete interrupt to the host driver while still processing the buffer that the driver has...

hoextdown:hoedown_fuzzer: Segv on unknown address in hoedown_autolink__url

Project: https://github.com/kjdev/hoextdown.git Detailed Report: https://oss-fuzz.com/testcase?key=6536491968036864 Project: hoextdown Fuzzing Engine: afl Fuzz Target: hoedownfuzzer Job Type: aflasanhoextdown Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

SUSE CVE-2023-54060

In the Linux kernel, the following vulnerability has been resolved: iommufd: Set end correctly when doing batch carry Even though the test suite covers this it somehow became obscured that this wasn't working. The test iommufdioas.mockdomain.accessdomaindestory would blow up rarely. end should be...

SUSE CVE-2025-68742

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog-stats access when updateeffectiveprogs fails Syzkaller triggers an invalid memory access issue following fault injection in updateeffectiveprogs. The issue can be described as follows: cgroupbpfdetach...

Linux Distros Unpatched Vulnerability : CVE-2022-50724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: core: fix resource leak in regulatorregister I got some resource leak reports while doing fault injection test: OF: ERROR: memory leak, expected...

Linux Distros Unpatched Vulnerability : CVE-2023-54007

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vmcihost: fix a race condition in vmcihostpoll causing GPF During fuzzing, a general protection fault is observed in vmcihostpoll. general protection fault,...