CVE search · CVE-2025-24928
CVE-2025-24928
high 7.7
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-121
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | high 7.8 | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N |
cve@mitre.orgSecondary |
| CVSS 3.1 | high 7.7 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- netapp · active_iq_unified_manager
- netapp · manageability_software_development_kit
- netapp · ontap
- netapp · solidfire_&_hci_management_node
- xmlsoft · libxml2
- netapp · hci_compute_node
- netapp · h410c_firmware
- netapp · h300s_firmware
- netapp · h500s_firmware
- netapp · h700s_firmware
- netapp · h410s_firmware