CVE-2025-10911

medium

Description

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

References

Advisories
More

https://access.redhat.com/errata/RHSA-2026:74674

https://access.redhat.com/errata/RHSA-2026:58981

https://access.redhat.com/errata/RHSA-2026:44481

https://access.redhat.com/errata/RHSA-2026:33313

https://access.redhat.com/errata/RHSA-2026:30847

https://access.redhat.com/errata/RHSA-2026:29976

https://access.redhat.com/errata/RHSA-2026:29975

https://access.redhat.com/errata/RHSA-2026:29814

https://access.redhat.com/errata/RHSA-2026:29811

https://access.redhat.com/errata/RHSA-2026:29809

https://access.redhat.com/errata/RHSA-2026:29807

https://access.redhat.com/errata/RHSA-2026:28584

https://access.redhat.com/errata/RHSA-2026:28243

https://access.redhat.com/errata/RHSA-2026:26355

https://access.redhat.com/errata/RHSA-2026:11015

https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77

https://gitlab.gnome.org/GNOME/libxslt/-/issues/144

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-31128

https://bugzilla.redhat.com/show_bug.cgi?id=2397838

https://access.redhat.com/security/cve/CVE-2025-10911

Details

Source: Mitre, NVD

Published: 2025-09-25

Updated: 2026-10-02

Named Vulnerability: GHSA-g23f-vwrr-7m5p

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H