CVE-2025-6021

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

Score
CVSS 3.1 7.5 High
Status
Modified - secalert@redhat.com
Published
2025-06-12
Last modified
2026-10-12
Weaknesses
CWE-787

Affected products

References