Description (CNA)
A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 through 1.1.43 |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected 0:1.1.39-8.el10_2.1 before * |
| Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support | unaffected 0:1.1.39-8.el10_0.1 before * |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected 0:1.1.32-6.4.el8_10 before * |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected 0:1.1.32-6.4.el8_10 before * |
| Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | unaffected 0:1.1.32-8.el8_4.1 before * |
| Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | unaffected 0:1.1.32-8.el8_4.1 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | unaffected 0:1.1.32-8.el8_6.1 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | unaffected 0:1.1.32-8.el8_6.1 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service | unaffected 0:1.1.32-8.el8_8.1 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | unaffected 0:1.1.32-8.el8_8.1 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:1.1.34-14.el9_8.1 before * |
| Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | unaffected 0:1.1.34-12.el9_2 before * |
| Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | unaffected 0:1.1.34-15.el9_4 before * |
| Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support | unaffected 0:1.1.34-13.el9_6.2 before * |
| Red Hat / Red Hat Discovery 2 | unaffected 1782756541 before * |
| Red Hat / Red Hat Hardened Images | unaffected 1.1.45-0.1.hum1 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1790703542 before * |
| Red Hat / Red Hat Update Infrastructure 5 | unaffected 1784795076 before * |
| Red Hat / Red Hat Update Infrastructure 5 | unaffected 1787241260 before * |
| Red Hat / Red Hat Enterprise Linux 6 | affected |
| Red Hat / Red Hat Enterprise Linux 7 | affected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
CWE
CWE-825
References
- https://access.redhat.com/errata/RHSA-2026:11015
- https://access.redhat.com/errata/RHSA-2026:26355
- https://access.redhat.com/errata/RHSA-2026:28243
- https://access.redhat.com/errata/RHSA-2026:28584
- https://access.redhat.com/errata/RHSA-2026:29807
- https://access.redhat.com/errata/RHSA-2026:29809
- https://access.redhat.com/errata/RHSA-2026:29811
- https://access.redhat.com/errata/RHSA-2026:29814
- https://access.redhat.com/errata/RHSA-2026:29975
- https://access.redhat.com/errata/RHSA-2026:29976
- https://access.redhat.com/errata/RHSA-2026:30847
- https://access.redhat.com/errata/RHSA-2026:33313
- https://access.redhat.com/errata/RHSA-2026:44481
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:74674
- https://access.redhat.com/security/cve/CVE-2025-10911
- https://bugzilla.redhat.com/show_bug.cgi?id=2397838
- https://gitlab.gnome.org/GNOME/libxslt/-/issues/144
- https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77
ADP enrichment
No English description supplied.
No references supplied.