https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:33:51 +0000 https://vulnerability.circl.lu/vuln/cve-2025-24855 <p><strong>Affected:</strong> xmlsoft libxslt</p> <p>numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.</p> <p><strong>Affected:</strong> xmlsoft libxslt</p> <p>numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.</p> https://vulnerability.circl.lu/vuln/cve-2025-24855 https://vulnerability.circl.lu/vuln/usn-7361-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libxslt, Ubuntu:22.04:LTS: libxslt, Ubuntu:24.04:LTS: libxslt</p> <p>Ivan Fratric discovered that Libxslt incorrectly handled certain memory operations when handling documents. A remote attacker could use this issue to cause Libxslt to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libxslt, Ubuntu:22.04:LTS: libxslt, Ubuntu:24.04:LTS: libxslt</p> <p>Ivan Fratric discovered that Libxslt incorrectly handled certain memory operations when handling documents. A remote attacker could use this issue to cause Libxslt to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/usn-7361-1