CVE-2025-24855

xmlsoft / libxslt PUBLISHED

Description (CNA)

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Affected (CNA)

Vendor / product	Versions
xmlsoft / libxslt	affected 0 before 1.1.43

CWE

CWE-416

References

https://gitlab.gnome.org/GNOME/libxslt/-/issues/128

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://lists.debian.org/debian-lts-announce/2025/03/msg00015.html