BIT-jre-2025-10911: Libxslt: use-after-free with key data stored cross-rvt

Published Sep 25, 2025

Updated

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

Affected Software

1 affected component

libxslt libxslt

Event History

Sep 25, 2025

CVE Published

via OSV·03:13 PM

Data Sourced

via OSV·03:13 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What must an attacker do to trigger this issue?

The vulnerable application must parse attacker-controlled XSL nodes. Exploitation requires user interaction, and the attacker does not need privileges.

What is the expected impact?

The issue can cause an application crash through dereferencing expired pointers. The supplied severity vector indicates no confidentiality or integrity impact, with availability impact rated high.

Are remotely exposed services affected?

The supplied severity vector lists local attack vector access. The available data does not establish exposure through a network-facing service.

BIT-jre-2025-10911: Libxslt: use-after-free with key data stored cross-rvt

Affected Software

Event History

Frequently Asked Questions

What must an attacker do to trigger this issue?

What is the expected impact?

Are remotely exposed services affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to trigger this issue?

What is the expected impact?

Are remotely exposed services affected?