CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2025-12-26

Last modified

2026-10-13

Weaknesses

CWE-400

Affected products

• Libxmljs (Libxmljs Project)

References

• https://github.com/libxmljs/libxmljs/issues/667