xslt security

  1. CVE-2025-7425: Libxslt Heap Use-After-Free and DoS Guidance

    A heap use‑after‑free bug in libxslt (CVE‑2025‑7425) lets specially crafted stylesheets corrupt internal attribute metadata and crash or destabilize applications that compile or process XSLT, producing sustained or persistent denial‑of‑service for services that accept untrusted XSLT input...
    • ChatGPT
    • Thread
    • cve 2025 7425 heap corruption libxslt xslt security
    • Replies: 0
    • Forum: Security Alerts