NULL Pointer Dereference

🗓️ 24 Feb 2025 13:08:02Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 5 Views

libxml2 vulnerable to NULL Pointer Dereference, causing crashes with specific XML data processing.

Reporter	Title	Published	Views	Family All 184
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation	28 May 202514:39	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to the libxml2 package (CVE-2025-27113, CVE-2025-32414, CVE-2025-32415)	2 Sep 202514:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in libxml2 affect AIX/VIOS	4 Jun 202515:05	–	ibm
Tenable Nessus	AIX : Multiple Vulnerabilities (IJ54679)	4 Jun 202500:00	–	nessus
Tenable Nessus	AIX : Multiple Vulnerabilities (IJ54754)	4 Jun 202500:00	–	nessus
Tenable Nessus	AIX : Multiple Vulnerabilities (IJ54779)	4 Jun 202500:00	–	nessus
Tenable Nessus	AIX : Multiple Vulnerabilities (IJ54873)	4 Jun 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : libxml2, libxml2-devel, libxml2-static (ALAS2023-2025-896)	31 Mar 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libxml2 (ALAS-2025-2794)	27 Mar 202500:00	–	nessus
Tenable Nessus	Apple iOS < 18.4 Multiple Vulnerabilities (122371)	31 Mar 202500:00	–	nessus

Vulners

Node

xmlsoft libxml2Match2.9.10+dfsg-6.2debian

AND

debian debian_linuxMatch11

xmlsoft libxml2Match2.13.4-r4cpp

AND

xmlsoft libxml2Match2.13.4-r1cpp

AND

xmlsoft libxml2Match2.13.4-r3cpp

AND

xmlsoft libxml2Match2.13.4-r2cpp

AND

alpinelinux alpine_linuxMatch3.21

xmlsoft libxml2Match2.11.7-r0cpp

AND

xmlsoft libxml2Match2.11.3-r0cpp

AND

xmlsoft libxml2Match2.11.2-r0cpp

AND

xmlsoft libxml2Match2.11.4-r0cpp

AND

xmlsoft libxml2Match2.10.4-r2cpp

AND

xmlsoft libxml2Match2.11.8-r0cpp

AND

xmlsoft libxml2Match2.11.0-r0cpp

AND

xmlsoft libxml2Match2.11.6-r0cpp

AND

xmlsoft libxml2Match2.11.1-r0cpp

AND

xmlsoft libxml2Match2.11.8-r1cpp

AND

alpinelinux alpine_linuxMatch3.18

xmlsoft libxml2Match2.11.7-r0cpp

AND

xmlsoft libxml2Match2.11.5-r0cpp

AND

xmlsoft libxml2Match2.11.6-r0cpp

AND

xmlsoft libxml2Match2.11.8-r0cpp

AND

xmlsoft libxml2Match2.11.8-r1cpp

AND

alpinelinux alpine_linuxMatch3.19

xmlsoft libxml2Match2.12.7-r0cpp

AND

xmlsoft libxml2Match2.12.7-r1cpp

AND

xmlsoft libxml2Match2.12.6-r2cpp

AND

alpinelinux alpine_linuxMatch3.20

xmlsoft libxml2Match2.10.3-r0cpp

AND

xmlsoft libxml2Match2.11.5-r0cpp

AND

xmlsoft libxml2Match2.9.12-r3cpp

AND

xmlsoft libxml2Match2.9.12-r2cpp

AND

xmlsoft libxml2Match2.13.4-r0cpp

AND

xmlsoft libxml2Match2.10.1-r0cpp

AND

xmlsoft libxml2Match2.9.12-r1cpp

AND

xmlsoft libxml2Match2.9.10-r7cpp

AND

xmlsoft libxml2Match2.9.10-r4cpp

AND

xmlsoft libxml2Match2.11.1-r0cpp

AND

xmlsoft libxml2Match2.13.4-r3cpp

AND

xmlsoft libxml2Match2.12.6-r0cpp

AND

xmlsoft libxml2Match2.11.4-r0cpp

AND

xmlsoft libxml2Match2.9.10-r3cpp

AND

xmlsoft libxml2Match2.12.8-r0cpp

AND

xmlsoft libxml2Match2.12.6-r2cpp

AND

xmlsoft libxml2Match2.12.7-r0cpp

AND

xmlsoft libxml2Match2.9.14-r1cpp

AND

xmlsoft libxml2Match2.10.3-r1cpp

AND

xmlsoft libxml2Match2.10.0-r0cpp

AND

xmlsoft libxml2Match2.12.5-r0cpp

AND

xmlsoft libxml2Match2.9.14-r0cpp

AND

xmlsoft libxml2Match2.9.13-r0cpp

AND

xmlsoft libxml2Match2.11.3-r1cpp

AND

xmlsoft libxml2Match2.10.2-r1cpp

AND

xmlsoft libxml2Match2.11.3-r0cpp

AND

xmlsoft libxml2Match2.10.3-r2cpp

AND

xmlsoft libxml2Match2.9.10-r6cpp

AND

xmlsoft libxml2Match2.10.4-r1cpp

AND

xmlsoft libxml2Match2.10.2-r0cpp

AND

xmlsoft libxml2Match2.11.2-r0cpp

AND

xmlsoft libxml2Match2.10.4-r2cpp

AND

xmlsoft libxml2Match2.13.4-r1cpp

AND

xmlsoft libxml2Match2.11.0-r0cpp

AND

xmlsoft libxml2Match2.11.6-r0cpp

AND

alpinelinux alpine_linuxMatchedge

libxml2.so libxml2.soRange2.13.4.debug–2.13.6.debugcpp

libxml2.so libxml2.soRange2.5.10.debug–2.12.8cpp

Source	Link
gitlab	www.gitlab.gnome.org/GNOME/libxml2/-/issues/861
gitlab	www.gitlab.gnome.org/GNOME/libxml2/-/commit/6c716d491dd2e67f08066f4dc0619efeb49e43e6
seclists	www.seclists.org/fulldisclosure/2025/Apr/8
seclists	www.seclists.org/fulldisclosure/2025/Apr/5
seclists	www.seclists.org/fulldisclosure/2025/Apr/4
seclists	www.seclists.org/fulldisclosure/2025/Apr/12
lists	www.lists.debian.org/debian-lts-announce/2025/02/msg00028.html
seclists	www.seclists.org/fulldisclosure/2025/Apr/10
seclists	www.seclists.org/fulldisclosure/2025/Apr/13
seclists	www.seclists.org/fulldisclosure/2025/Apr/11

04 Nov 2025 00:35Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.12.9 - 7.5

EPSS0.00094

SSVC

libxml2 null pointer dereference crash processing xml