Medium
Libxslt: use-after-free with key data stored cross-rvt
A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.
Announced Group revision 1
Original source ↗CVE-2025-10911
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:CVE-2025-10911
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"repo": "https://gitlab.gnome.org/gnome/libxslt",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "71be7a32637760d769b193d95e0c745ecb86b679"
}
],
"database_specific": {
"source": "AFFECTED_FIELD",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "1.1.43"
}
]
}
}
],
"versions": [
"v1.1.43",
"v1.1.42",
"v1.1.41",
"v1.1.40",
"v1.1.39",
"v1.1.38",
"v1.1.37",
"v1.1.36",
"v1.1.35",
"v1.1.34",
"v1.1.34-rc2",
"v1.1.33",
"v1.1.33-rc2",
"v1.1.33-rc1",
"v1.1.32",
"v1.1.32-rc2",
"v1.1.32-rc1",
"v1.1.31",
"v1.1.31-rc2",
"v1.1.31-rc1",
"v1.1.30",
"v1.1.30-rc2",
"v1.1.30-rc1",
"v1.1.29",
"v1.1.29-rc2",
"v1.1.29-rc1",
"CVE-2015-7995",
"v1.1.28",
"v1.1.27",
"v1.1.27-rc1",
"v1.1.26",
"v1.1.25",
"1.1.24",
"1.1.23",
"LIBXSLT_1_1_22",
"LIBXSLT_1_1_21",
"LIBXSLT_1_1_18",
"LIBXSLT_1_1_17",
"LIBXSLT_1_1_16",
"LIBXSLT_1_1_15",
"LIBXSLT_1_1_14",
"LIBXSLT_1_1_13",
"LIBXSLT_1_1_12",
"LIBXSLT_1_1_11",
"LIBXSLT_1_1_10",
"LIBXSLT_1_1_9",
"LIBXSLT_1_1_8",
"LIBXSLT_1_1_7",
"LIBXSLT_1_1_6",
"LIBXSLT_1_1_5",
"LIBXSLT_1_1_4",
"LIBXSLT_1_1_3",
"LIBXSLT_1_1_2",
"LIBXSLT_1_1_1",
"LIBXSLT_1_1_0",
"LIBXSLT_1_0_33",
"LIBXSLT_1_0_32",
"LIBXSLT_1_0_31",
"LIBXSLT_1_0_30",
"LIBXSLT_1_0_29",
"LIBXSLT_1_0_28",
"LIBXSLT_1_0_27",
"LIBXSLT_1_0_26",
"LIBXSLT_1_0_25",
"LIBXSLT_1_0_24",
"LIBXSLT_1_0_23",
"LIBXSLT_1_0_22",
"LIBXSLT_1_0_21",
"LIBXSLT_1_0_20",
"LIBXSLT_1_0_19",
"LIBXSLT_1_0_18",
"LIBXSLT_1_0_17",
"LIBXSLT_1_0_16",
"LIBXSLT_1_0_14",
"LIBXSLT_1_0_13",
"LIBXSLT_1_0_12",
"LIBXSLT_1_0_11",
"LIBXSLT_1_0_10",
"LIBXSLT_1_0_9",
"LIBXSLT_1_0_8",
"LIBXSLT_1_0_7",
"LIBXSLT_1_0_6",
"LIBXSLT_1_0_5",
"LIBXSLT_1_0_4",
"LIBXSLT_1_0_3",
"LIBXSLT_1_0_2",
"LIBXSLT_1_0_0",
"LIBXSLT_0_14_0",
"LIBXSLT_0_13_0",
"LIBXSLT_0_12_0",
"LIBXSLT_0_11_0",
"LIBXSLT_0_10_0",
"LIBXSLT_0_9_0",
"LIBXSLT_0_8_0",
"LIBXSLT_0_7_0",
"LIBXSLT_0_6_0",
"LIXSLT_0_5_0",
"LIBXSLT_0_4_0",
"LIBXSLT_0_3_0",
"LIBXSLT_0_1_0",
"LIBXSLT_0_0_0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-10911.json"
}
}
]- Related CVEs
- CVE-2025-10911
Source reference:
/id
Publisher severity
medium
Source reference: /severity/0/score
- Event
- #72821 · Revision 1
- Added to Heist Feed
- Publisher date