Skip to content
Heist/ feed
MediumFix available

Libxslt: use-after-free with key data stored cross-rvt

Type: advisorySource: OSV1 source record

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

Announced Source revision 1
Original source ↗

BIT-jre-2025-10911

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:BIT-jre-2025-10911

jre

Source reference: /affected/0/package/name

Affected versions
Not stated in this record
Fixed versions
1.8.0

Source reference: /affected/0/ranges

8.0.481

Source reference: /affected/0/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "SEMVER",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.8.0"
          },
          {
            "introduced": "1.9.0"
          },
          {
            "fixed": "8.0.481"
          }
        ]
      }
    ],
    "package": {
      "name": "jre",
      "purl": "pkg:bitnami/jre",
      "ecosystem": "Bitnami"
    },
    "severity": [
      {
        "type": "CVSS_V3",
        "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
      }
    ],
    "database_specific": {
      "source": "https://github.com/bitnami/vulndb/tree/main/data/jre/BIT-jre-2025-10911.json"
    }
  }
]
Related CVEs
CVE-2025-10911

Source reference: /aliases

Publisher severity

medium

Source reference: /database_specific/severity

Linked CVE context

These ratings describe the referenced vulnerabilities and products. They are not a severity rating for every application using this dependency.

CVE-2025-10911 · Medium

Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Discovery 2, Red Hat Hardened Images, Red Hat OpenShift AI 3.4, Red Hat Update Infrastructure 5, Red Hat Update Infrastructure 5, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat OpenShift Container Platform 4, Red Hat OpenShift Container Platform 4

CVE-2025-10911 · Medium

Event
#84165 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement