CVE-2025-6021 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Denial of service |
| Description | The xmlBuildQName function in tree.c is vulnerable to an integer overflow when calculating the required buffer size for concatenating a prefix and a local name (ncname). The lengths of ncname and prefix are retrieved using strlen (which returns size_t) but are then implicitly cast to int variables lenn and lenp. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2899 | libxml2 | 2.14.3-1 | 2.14.4-1 | High | Fixed |