A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.

redhat RHSA-2025:13464: RHSA-2025:13464: libxml2 security update (Important)

vendor_unpatched cve-2025-7425: Unpatched CVEs for Debian Linux, Red Hat Enterprise Linux, CentOS Linux, Ubuntu Linux (cve-2025-7425)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13312 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13308 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13310 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13309 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13311 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13313 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13314 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0129 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2025-7425:
    A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts     internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this     corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory,     causing crashes or enabling attackers to trigger heap corruption.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02617-1 advisory.

    - CVE-2025-7425: Fixed heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr     (bsc#1246296)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02620-1 advisory.

    - CVE-2025-7425: Fixed heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr     (bsc#1246296)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02621-1 advisory.

    - CVE-2025-7425: Fixed heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr     (bsc#1246296)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:12447 advisory.

    * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:12450 advisory.

    * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12447 advisory.

    [2.9.13-11]
    - Fix CVE-2025-7425 (RHEL-102806)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12450 advisory.

    - Fix CVE-2025-7425 (RHEL-102797)
    - Fix CVE-2025-6021 (RHEL-96498)
    - Fix CVE-2025-49794 (RHEL-96398)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:12450 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:12447 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02547-1 advisory.

    - CVE-2025-7425: Fixed heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr     (bsc#1246296)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.6. It is, therefore, affected by multiple vulnerabilities:

  - A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and     input data, which can lead to type confusion during XML transformations. This vulnerability allows an     attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or     unexpected behavior. (CVE-2025-7424)

  - Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157     allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium     security severity: High) (CVE-2025-6558)

  - A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts     internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this     corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory,     causing crashes or enabling attackers to trigger heap corruption. (CVE-2025-7425)

  - This issue was addressed by adding an additional prompt for user consent. (CVE-2025-24188, CVE-2025-31273,     CVE-2025-31275, CVE-2025-31277, CVE-2025-31279, CVE-2025-31280, CVE-2025-31281, CVE-2025-43185,     CVE-2025-43186, CVE-2025-43188, CVE-2025-43189, CVE-2025-43193, CVE-2025-43195, CVE-2025-43198,     CVE-2025-43199, CVE-2025-43215, CVE-2025-43216, CVE-2025-43218, CVE-2025-43219, CVE-2025-43221,     CVE-2025-43222, CVE-2025-43223, CVE-2025-43224, CVE-2025-43225, CVE-2025-43226, CVE-2025-43227,     CVE-2025-43229, CVE-2025-43230, CVE-2025-43232, CVE-2025-43233, CVE-2025-43234, CVE-2025-43235,     CVE-2025-43236, CVE-2025-43237, CVE-2025-43238, CVE-2025-43239, CVE-2025-43240, CVE-2025-43241,     CVE-2025-43243, CVE-2025-43244, CVE-2025-43245, CVE-2025-43246, CVE-2025-43247, CVE-2025-43248,     CVE-2025-43249, CVE-2025-43250, CVE-2025-43251, CVE-2025-43252, CVE-2025-43254, CVE-2025-43255,     CVE-2025-43256, CVE-2025-43257, CVE-2025-43259, CVE-2025-43260, CVE-2025-43261, CVE-2025-43264,     CVE-2025-43265, CVE-2025-43266, CVE-2025-43267, CVE-2025-43268, CVE-2025-43270, CVE-2025-43273,     CVE-2025-43274, CVE-2025-43275, CVE-2025-43276, CVE-2025-43277)

  - An integer overflow was addressed with improved input validation. (CVE-2025-31243, CVE-2025-43187,     CVE-2025-43191, CVE-2025-43192, CVE-2025-43194, CVE-2025-43196, CVE-2025-43197, CVE-2025-43206,     CVE-2025-43210, CVE-2025-43220, CVE-2025-43253)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 18.6. It is, therefore, affected by multiple vulnerabilities.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b0a3466f-5efc-11f0-ae84-99047d0a6bcc advisory.

    Alan Coopersmith reports:
    On 6/16/25 15:12, Alan Coopersmith wrote:

                BTW, users of libxml2 may also be using its sibling project, libxslt,                 which currently has no active maintainer, but has three unfixed security issues                 reported against it according to

                    https://gitlab.gnome.org/Teams/Releng/security/-/wikis/2025#libxml2-and-libxslt

    2 of the 3 have now been disclosed:
    (CVE-2025-7424) libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes     https://gitlab.gnome.org/GNOME/libxslt/-/issues/139     https://project-zero.issues.chromium.org/issues/409761909     (CVE-2025-7425) libxslt: heap-use-after-free in xmlFreeID caused by `atype` corruption     https://gitlab.gnome.org/GNOME/libxslt/-/issues/140https://project-     zero.issues.chromium.org/issues/410569369     Engineers from Apple & Google have proposed patches in the GNOME gitlab issues,               but neither has had a fix applied to the git repo since there is currently no                 maintainer for libxslt.
    Note that a fourth vulnerability was reported on June 18, 2025, which remains undisclosed to date (GNOME     libxslt issue 148, link below), see

                https://gitlab.gnome.org/Teams/Releng/security/-/wikis/2025#libxml2-and-libxslt


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
244848	RHEL 9 : libxml2 (RHSA-2025:13312)	Nessus	Red Hat Local Security Checks	high
244847	RHEL 8 : libxml2 (RHSA-2025:13308)	Nessus	Red Hat Local Security Checks	high
244846	RHEL 8 : libxml2 (RHSA-2025:13310)	Nessus	Red Hat Local Security Checks	high
244845	RHEL 9 : libxml2 (RHSA-2025:13309)	Nessus	Red Hat Local Security Checks	high
244843	RHEL 8 : libxml2 (RHSA-2025:13311)	Nessus	Red Hat Local Security Checks	high
244841	RHEL 8 : libxml2 (RHSA-2025:13313)	Nessus	Red Hat Local Security Checks	high
244840	RHEL 9 : libxml2 (RHSA-2025:13314)	Nessus	Red Hat Local Security Checks	high
243963	Alibaba Cloud Linux 3 : 0129: libxml2 (ALINUX3-SA-2025:0129)	Nessus	Alibaba Cloud Linux Local Security Checks	high
243525	SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2025:02617-1)	Nessus	SuSE Local Security Checks	high
243524	SUSE SLES15 Security Update : libxml2 (SUSE-SU-2025:02620-1)	Nessus	SuSE Local Security Checks	high
243508	SUSE SLES15 / openSUSE 15 Security Update : libxml2 (SUSE-SU-2025:02621-1)	Nessus	SuSE Local Security Checks	high
243306	AlmaLinux 9 : libxml2 (ALSA-2025:12447)	Nessus	Alma Linux Local Security Checks	high
243304	AlmaLinux 8 : libxml2 (ALSA-2025:12450)	Nessus	Alma Linux Local Security Checks	high
243261	Oracle Linux 9 : libxml2 (ELSA-2025-12447)	Nessus	Oracle Linux Local Security Checks	high
243260	Oracle Linux 8 : libxml2 (ELSA-2025-12450)	Nessus	Oracle Linux Local Security Checks	high
243238	RHEL 8 : libxml2 (RHSA-2025:12450)	Nessus	Red Hat Local Security Checks	high
243236	RHEL 9 : libxml2 (RHSA-2025:12447)	Nessus	Red Hat Local Security Checks	high
243223	SUSE SLES12 Security Update : libxml2 (SUSE-SU-2025:02547-1)	Nessus	SuSE Local Security Checks	high
243030	macOS 15.x < 15.6 Multiple Vulnerabilities (124149)	Nessus	MacOS X Local Security Checks	high
243003	Apple iOS < 18.6 Multiple Vulnerabilities (124147)	Nessus	Mobile Devices	high
242029	FreeBSD : libxslt -- unmaintained, with multiple unfixed vulnerabilities (b0a3466f-5efc-11f0-ae84-99047d0a6bcc)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2025-7425

high

Tenable Plugins

Coming Soon

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high