NetSight
IP …
high7.5

CVE-2025-6021

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow.

Impact

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

Affected products

VendorProductAffected versions
XmlsoftLibxml2
before 2.14.4
RedhatJboss Core Services
All versions
RedhatOpenshift Container Platform
Versions 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
RedhatOpenshift Container Platform For Arm64
Versions 4.13, 4.14, 4.15, 4.16, 4.17, 4.18
RedhatOpenshift Container Platform For Ibm Z
Versions 4.13, 4.14, 4.15, 4.16, 4.17, 4.18
RedhatOpenshift Container Platform For Linuxone
Versions 4.13, 4.14, 4.15, 4.16, 4.17, 4.18
RedhatOpenshift Container Platform For Power
Versions 4.13, 4.14, 4.15, 4.16, 4.17, 4.18
RedhatEnterprise Linux
Versions 8.0, 9.0, 10.0
RedhatEnterprise Linux Eus
Versions 8.4, 8.6, 8.8, 9.4, 9.6, 10.0
RedhatEnterprise Linux For Arm 64
Versions 8.0_aarch64, 9.0_aarch64, 9.4_aarch64, 10.0_aarch64
RedhatEnterprise Linux For Arm 64 Eus
Versions 9.4_aarch64, 9.6_aarch64, 10.0_aarch64
RedhatEnterprise Linux For Ibm Z Systems
Versions 8.0_s390x, 9.4_s390x, 10.0_s390x

Weakness classification

CWE-787

References