CVE-2025-49795 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Denial of service |
| Description | A null pointer dereference vulnerability was discovered in the libxml2. The issue occurs in the xmlSchematronFormatReport function when processing incorrect XPath expressions in Schematron schema reports, leading to undefined behavior and potential crashes. The xmlXPathCompiledEval() function can return NULL when evaluating invalid XPath expressions, but the code immediately dereferences the returned pointer without checking for NULL. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2898 | libxml2 | 2.14.4-1 | High | Vulnerable |
| References |
|---|
https://gitlab.gnome.org/GNOME/libxml2/-/issues/932 |