BIT-jre-2025-7424: Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

Published Jul 10, 2025

Updated

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.

Affected Software

1 affected component

libxslt libxslt

Event History

Jul 10, 2025

CVE Published

via OSV·02:05 PM

Data Sourced

via OSV·02:05 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Does exploitation require authentication or user interaction?

The available CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What is the expected security impact if exploitation succeeds?

The CVSS assessment rates availability impact as high, with no confidentiality or integrity impact listed. The reported behavior includes application crashes, memory corruption, denial of service, or unexpected behavior during XML transformations.

BIT-jre-2025-7424: Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

Affected Software

Event History

Frequently Asked Questions

Does exploitation require authentication or user interaction?

What is the expected security impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require authentication or user interaction?

What is the expected security impact if exploitation succeeds?