A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.

An update of the libxslt package has been released.

According to the versions of the libxslt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and     input data, which can lead to type confusion during XML transformations. This vulnerability allows an     attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or     unexpected behavior.(CVE-2025-7424)

Tenable has extracted the preceding description block directly from the EulerOS libxslt security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986106 advisory.

    A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and     input data, which can lead to type confusion during XML transformations. This vulnerability allows an     attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or     unexpected behavior.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986118 advisory.

    A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and     input data, which can lead to type confusion during XML transformations. This vulnerability allows an     attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or     unexpected behavior.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4309 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4309-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     September 25, 2025                            https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : libxslt     Version        : 1.1.34-4+deb11u3     CVE ID         : CVE-2023-40403 CVE-2025-7424     Debian Bug     : 1108074 1109123

    Two vulnerabilities were found in libxslt, an XSLT 1.0 processing     library, which could lead to to denial of service or information     disclosure.

    CVE-2023-40403

        It was discovered that the generate-id() function could return         deterministic values and could leak the memory layout of different         XML objects, which might lead to information disclosure.

    CVE-2025-7424

         Ivan Fratric discovered a type confusion vulnerability in          xmlNode.psvi between stylesheet and source nodes. which could lead          to application crash.

    For Debian 11 bullseye, these problems have been fixed in version     1.1.34-4+deb11u3.

    We recommend that you upgrade your libxslt packages.

    For the detailed security status of libxslt please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libxslt

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libxslt installed on the remote host is prior to 1.1.28-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2966 advisory.

    A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and     input data, which can lead to type confusion during XML transformations. This vulnerability allows an     attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or     unexpected behavior. (CVE-2025-7424)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5979 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5979-1                   security@debian.org     https://www.debian.org/security/                                  Aron Xu     August 19, 2025                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : libxslt     CVE ID         : CVE-2023-40403 CVE-2025-7424     Debian Bug     : 1108074 1109123

    Two vunlerabilities were found in libxslt, the XSLT 1.0 processing library,     which may lead to information disclosure and DoS attack.

    CVE-2023-40403

        Information disclosure with weak memory handling of generated-id()

    CVE-2025-7424

        Type confusion in xmlNode.psvi between stylesheet and source nodes,         which may allow an attacker to crash the application or corrupt memory.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 1.1.35-1+deb12u2.

    For the stable distribution (trixie), these problems have been fixed in     version 1.1.35-1.2+deb13u1.

    We recommend that you upgrade your libxslt packages.

    For the detailed security status of libxslt please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libxslt

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its banner, the version of Apple TV on the remote device is prior to 18.6. It is therefore affected by multiple vulnerabilities as described in the 124153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and     input data, which can lead to type confusion during XML transformations. This vulnerability allows an     attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or     unexpected behavior. (CVE-2025-7424)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9bda2d2400 advisory.

    Apply proposed fix for CVE-2025-7424.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-29d4b5b927 advisory.

    Apply proposed fix for CVE-2205-7424.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1119 advisory.

    A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and     input data, which can lead to type confusion during XML transformations. This vulnerability allows an     attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or     unexpected behavior. (CVE-2025-7424)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.6. It is, therefore, affected by multiple vulnerabilities:

  - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above. (CVE-2025-6965)

  - A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6.
    Processing maliciously crafted web content may lead to an unexpected Safari crash. (CVE-2025-24188)

  - A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma     14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. An app may be able to gain root privileges.
    (CVE-2025-31243)

  - The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia     15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web     content may lead to memory corruption. (CVE-2025-31273)

  - A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6.
    A sandboxed process may be able to launch any installed app. (CVE-2025-31275)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 18.6. It is, therefore, affected by multiple vulnerabilities.

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7.7. It is, therefore, affected by multiple vulnerabilities:

  - A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and     input data, which can lead to type confusion during XML transformations. This vulnerability allows an     attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or     unexpected behavior. (CVE-2025-7424)

  - This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3,     macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to execute arbitrary code out of its sandbox     or with certain elevated privileges. (CVE-2025-24119)

  - A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma     14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. An app may be able to gain root privileges.
    (CVE-2025-31243)

  - A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6,     iPadOS 17.7.9, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to fingerprint the user.
    (CVE-2025-31279)

  - This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS     Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.4. A shortcut may be able to bypass sensitive     Shortcuts app settings. (CVE-2025-43184)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b0a3466f-5efc-11f0-ae84-99047d0a6bcc advisory.

    Alan Coopersmith reports:
    On 6/16/25 15:12, Alan Coopersmith wrote:

                BTW, users of libxml2 may also be using its sibling project, libxslt,                 which currently has no active maintainer, but has three unfixed security issues                 reported against it according to

                    https://gitlab.gnome.org/Teams/Releng/security/-/wikis/2025#libxml2-and-libxslt

    2 of the 3 have now been disclosed:
    (CVE-2025-7424) libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes     https://gitlab.gnome.org/GNOME/libxslt/-/issues/139     https://project-zero.issues.chromium.org/issues/409761909     (CVE-2025-7425) libxslt: heap-use-after-free in xmlFreeID caused by `atype` corruption     https://gitlab.gnome.org/GNOME/libxslt/-/issues/140https://project-     zero.issues.chromium.org/issues/410569369     Engineers from Apple & Google have proposed patches in the GNOME gitlab issues,               but neither has had a fix applied to the git repo since there is currently no                 maintainer for libxslt.
    Note that a fourth vulnerability was reported on June 18, 2025, which remains undisclosed to date (GNOME     libxslt issue 148, link below), see

                https://gitlab.gnome.org/Teams/Releng/security/-/wikis/2025#libxml2-and-libxslt


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
270082	Photon OS 4.0: Libxslt PHSA-2025-4.0-0887	Nessus	PhotonOS Local Security Checks	high
270048	EulerOS 2.0 SP11 : libxslt (EulerOS-SA-2025-2204)	Nessus	Huawei Local Security Checks	high
270013	EulerOS 2.0 SP11 : libxslt (EulerOS-SA-2025-2236)	Nessus	Huawei Local Security Checks	high
269972	Photon OS 5.0: Libxslt PHSA-2025-5.0-0641	Nessus	PhotonOS Local Security Checks	high
268423	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxslt (UTSA-2025-986106)	Nessus	Unity Linux Local Security Checks	high
268093	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libxslt (UTSA-2025-986118)	Nessus	Unity Linux Local Security Checks	high
265923	Debian dla-4309 : libxslt1-dev - security update	Nessus	Debian Local Security Checks	medium
252300	Amazon Linux 2 : libxslt (ALAS-2025-2966)	Nessus	Amazon Linux Local Security Checks	high
252283	Debian dsa-5979 : libxslt1-dev - security update	Nessus	Debian Local Security Checks	high
249207	Apple TV < 18.6 Multiple Vulnerabilities (124153)	Nessus	Misc.	high
244037	Linux Distros Unpatched Vulnerability : CVE-2025-7424	Nessus	Misc.	high
243552	Fedora 42 : mingw-libxslt (2025-9bda2d2400)	Nessus	Fedora Local Security Checks	high
243551	Fedora 41 : mingw-libxslt (2025-29d4b5b927)	Nessus	Fedora Local Security Checks	high
243471	Amazon Linux 2023 : libxslt, libxslt-devel, python3-libxslt (ALAS2023-2025-1119)	Nessus	Amazon Linux Local Security Checks	high
243030	macOS 15.x < 15.6 Multiple Vulnerabilities (124149)	Nessus	MacOS X Local Security Checks	high
243003	Apple iOS < 18.6 Multiple Vulnerabilities (124147)	Nessus	Mobile Devices	high
243002	macOS 14.x < 14.7.7 Multiple Vulnerabilities (124150)	Nessus	MacOS X Local Security Checks	high
242029	FreeBSD : libxslt -- unmaintained, with multiple unfixed vulnerabilities (b0a3466f-5efc-11f0-ae84-99047d0a6bcc)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2025-7424

high

Tenable Plugins

high

high

high

high

high

high

medium

high

high

high

high

high

high

high

high

high

high

high