Vulnerability Report

CVE-2025-7424

Title: Xmlsoft Libxslt DoS

DoS

Proof Of Concept

No public PoC currently indexed for CVE-2025-7424.

CWE Category CWE-843

Published Date Jul 10, 2025

Modified Date Jun 29, 2026

Exploit Status Not Found

Score 7.5 CVSS v3.1

Exploit Probability (EPSS)

1.20%

Vulnerability Summary

CVE-2025-7424: A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.

Impacted Vendors

xmlsoft 1

redhat 1

Reference Links

https://access.redhat.com/security/cve/CVE-2025-7424 https://bugzilla.redhat.com/show_bug.cgi?id=2379228 http://seclists.org/fulldisclosure/2025/Aug/0 http://seclists.org/fulldisclosure/2025/Jul/30 http://seclists.org/fulldisclosure/2025/Jul/32 http://seclists.org/fulldisclosure/2025/Jul/33 http://seclists.org/fulldisclosure/2025/Jul/35 http://seclists.org/fulldisclosure/2025/Jul/37 http://www.openwall.com/lists/oss-security/2025/07/11/2 https://lists.debian.org/debian-lts-announce/2025/09/msg00024.html

CVSS v3.1

Source Entity [email protected]

Severity HIGH

7.5

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H