Vulnerability Report

CVE-2025-6021

Title: Xmlsoft Libxml2 Memory Corruption

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2025-6021.

CWE Category CWE-787
Published Date Jun 12, 2025
Modified Date Jun 30, 2026
Exploit Status Not Found
Score 7.5 CVSS v3.1
Exploit Probability (EPSS)
1.07%

Vulnerability Summary

CVE-2025-6021: A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

Impacted Vendors

X
xmlsoft 1
R
redhat 6

Reference Links

https://access.redhat.com/errata/RHSA-2025:10630 https://access.redhat.com/errata/RHSA-2025:10698 https://access.redhat.com/errata/RHSA-2025:10699 https://access.redhat.com/errata/RHSA-2025:11580 https://access.redhat.com/errata/RHSA-2025:11673 https://access.redhat.com/errata/RHSA-2025:12098 https://access.redhat.com/errata/RHSA-2025:12099 https://access.redhat.com/errata/RHSA-2025:12199 https://access.redhat.com/errata/RHSA-2025:12237 https://access.redhat.com/errata/RHSA-2025:12239 https://access.redhat.com/errata/RHSA-2025:12240 https://access.redhat.com/errata/RHSA-2025:12241 https://access.redhat.com/errata/RHSA-2025:13267 https://access.redhat.com/errata/RHSA-2025:13289 https://access.redhat.com/errata/RHSA-2025:13325 https://access.redhat.com/errata/RHSA-2025:13335 https://access.redhat.com/errata/RHSA-2025:13336 https://access.redhat.com/errata/RHSA-2025:14059 https://access.redhat.com/errata/RHSA-2025:14396 https://access.redhat.com/errata/RHSA-2025:15308 https://access.redhat.com/errata/RHSA-2025:15672 https://access.redhat.com/errata/RHSA-2025:19020 https://access.redhat.com/security/cve/CVE-2025-6021 https://bugzilla.redhat.com/show_bug.cgi?id=2372406 https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html https://gitlab.gnome.org/GNOME/libxml2/-/issues/926
CVSS v3.1
Source Entity [email protected]
Severity HIGH
7.5
Attack Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
NONE
Confidentiality
N/A
Integrity
N/A
Availability
N/A
Scope
UNCHANGED
RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2025-6021 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector NETWORK
Complexity LOW
Privileges N/A
Interaction NONE
CVSS Vector String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Stack

No specific products linked.