QSearchQSearch

CVE-2025-49796

9.1 CRITICAL

A vulnerability was found in libxml2

Published: 2025-06-16 · Last updated: 2026-06-02

Severity and scoring

CVSS
9.1 CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CWE
CWE-125

Description

A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.

Source: NVD

References

Related CVEs

Same CWE

  • CVE-2025-9033 — Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Co... (7.8 HIGH)
  • CVE-2025-9032 — Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Executio... (7.8 HIGH)
  • CVE-2025-7017 — Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Executi... (7.8 HIGH)
  • CVE-2025-7011 — Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Local Execution of C... (7.8 HIGH)
  • CVE-2025-7009 — Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Co... (7.8 HIGH)