CVE-2025-49794 - CVE House
Back to Database
Status published Critical CVE-2025-49794

Libxml: heap use after free (uaf) leads to denial of service (dos)

Vulnerability Description

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-49794

Credits & Attribution

No credits recorded in the NVD database.

References

More from Unknown

View All →
CVE-2025-9978
Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS
Unknown 0
CVE-2025-9959
Sandbox escape in smolagents Local Python execution environment via dunder attributes
High 7.6
CVE-2025-9900
Libtiff: libtiff write-what-where
High 8.8
CVE-2025-9784
Undertow: undertow madeyoureset http/2 ddos vulnerability
High 7.5
CVE-2025-9710
Responsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments
Unknown 0

Affected Vendor

Affected Software

Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat JBoss Core Services 2.4.62.SP2, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20, Red Hat Web Terminal 1.11 on RHEL 9, Red Hat Web Terminal 1.12 on RHEL 9, RHOSS-1.36-RHEL-8, cert-manager operator for Red Hat OpenShift 1.16, OpenShift File Integrity Operator - FIO 1, Red Hat Hardened Images, Red Hat Insights proxy 1.5, Red Hat Enterprise Linux 6
Vulnerable Versions:
0, 0:2.12.5-7.el10_0, 0:2.9.1-6.el7_9.10, 0:2.9.7-21.el8_10.1, 0:2.9.7-9.el8_2.3, 0:2.9.7-9.el8_4.6, 0:2.9.7-13.el8_6.10, 0:2.9.7-16.el8_8.9, 0:2.9.13-10.el9_6, 0:2.9.13-1.el9_0.5, 0:2.9.13-3.el9_2.7, 0:2.9.13-10.el9_4, 412.86.202510291903-0, 413.92.202510150118-0, 414.92.202510211419-0, 417.94.202510112152-0, 418.94.202510230424-0, 4.19.9.6.202510140714-0, 4.20.9.6.202509251656-0, 1.11-19, 1.11-8, 1.12-4, 1.36.0-11, 1.36.0-10, 1.36.0-4, 1.36.0-9, 1.36.0-12, 1.36.0-18, 1.36.0-7, v1.16.5-1760515757, v1.3, 2.15.2-0.3.hum1, 1.5.5-1754504343

Timeline

Official Publish: June 16th, 2025
Last Modified: June 29th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)

CWE-825

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.