CVE-2024-25062 — n/a / n/a

Description (CNA)

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://gitlab.gnome.org/GNOME/libxml2/-/tags
https://gitlab.gnome.org/GNOME/libxml2/-/issues/604

ADP enrichment

CVE

No English description supplied.

https://gitlab.gnome.org/GNOME/libxml2/-/tags
https://gitlab.gnome.org/GNOME/libxml2/-/issues/604
https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html
https://security.netapp.com/advisory/ntap-20241018-0009/

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.

https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-784301.html