Gnome LIBXML2 vulnerabilities

2 CVEs affecting Gnome LIBXML2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-7425, published 2025-07-10.

More from Gnome.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-49795, published 2025-06-16. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of…
• CVE-2025-7425, published 2025-07-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree…