Lucene search
+L

23 matches found

osv_jlsec
osv_jlsec
•added 2026/06/08 1:15 p.m.•35 views

JLSEC-2026-583 numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an...

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00358EPSS
SaveExploits1References4
osv_bit
osv_bit
•added 2026/05/08 5:46 a.m.•34 views

BIT-JRE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00358EPSS
SaveExploits1References3
osv_bit
osv_bit
•added 2026/05/06 2:45 p.m.•27 views

BIT-JAVA-MIN-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00358EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/01/13 12:00 a.m.•7 views

MiracleLinux 7 : libxslt-1.1.28-6.0.2.el7.AXS7 (AXSA:2025-9856:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9856:03 advisory. CVE-2025-24855: fix use-after-free issue in numbers.c by restoring XPath context node in nested XPath evaluations CVEs: CVE-2025-24855 numbers.c in libxslt...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2025/06/11 12:00 a.m.•9 views

Huawei EulerOS: Security Advisory for libxslt (EulerOS-SA-2025-1621)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.00358EPSS
SaveExploits4References2
RedHat Linux
RedHat Linux
•added 2025/05/13 3:59 p.m.•21 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits1References5
Amazon
Amazon
•added 2025/04/16 12:00 a.m.•16 views

Important: libxslt

Issue Overview: xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes. CVE-2024-55549 numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits4
RedHat Linux
RedHat Linux
•added 2025/04/07 2:23 a.m.•33 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2025/04/07 2:20 a.m.•20 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2025/04/07 2:02 a.m.•19 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2025/04/07 1:56 a.m.•20 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2025/04/07 1:38 a.m.•20 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits1References5
osv_clsa
osv_clsa
•added 2025/04/04 10:52 a.m.•28 views

CLSA-2025-1743763948 libxslt: Fix of CVE-2025-24855

CVE-2025-24855: fix use-after-free issue in numbers.c by restoring XPath context node in nested XPath evaluations...

7.8CVSS7.6AI score0.00358EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2025/03/31 2:09 a.m.•24 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits1References5
Microsoft CVE
Microsoft CVE
•added 2025/03/25 7:00 a.m.•15 views

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

...

7.8CVSS7.5AI score0.00358EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/03/25 12:00 a.m.•27 views

CBL Mariner 2.0 Security Update: libxslt (CVE-2025-24855)

The version of libxslt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-24855 advisory. - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2025/03/24 2:10 p.m.•21 views

libxslt: Use-After-Free in libxslt numbers.c

A flaw was found in libxslt numbers.c. This vulnerability allows a use-after-free, potentially leading to memory corruption or code execution via nested XPath evaluations where an XPath context node can be modified but not restored...

7.8CVSS7.7AI score0.00358EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2025/03/14 2:45 p.m.•17 views

SUSE CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00358EPSS
SaveExploits1References12
osv_azl
osv_azl
•added 2025/03/14 2:15 a.m.•22 views

AZL-58665 CVE-2025-24855 affecting package libxslt for versions less than 1.1.43-1

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00358EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2025/03/14 2:15 a.m.•34 views

UBUNTU-CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

7.8CVSS7.6AI score0.00358EPSS
SaveExploits1References4
Rows per page
Query Builder