CNNVD-202509-3960 Information

CNNVD ID

CNNVD-202509-3960

CVE-2025-10911

  • CNNVD Published: 2025-09-25

Description (Chinese)

Libxslt是Libxslt开源的一个为 GNOME 项目开发的 XSLT C 库。 Libxslt存在安全漏洞,该漏洞源于解析xsl节点时存在释放后重用问题,可能导致取消引用过期指针和应用程序崩溃。

Description (English)

Libxslt is an XSLT C library developed for the GNOME project at the Libxslt Open Source. Libxslt had a security loophole, which stemmed from the problem of re-use after release when the xsl node was deciphered, which could lead to the elimination of references to expired points and the collapse of the application.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Libxslt

Published

2025-09-25

Last Modified

2026-02-24

References

https://access.redhat.com/security/cve/CVE-2025-10911 https://bugzilla.redhat.com/show_bug.cgi?id=2397838 https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77 https://gitlab.gnome.org/GNOME/libxslt/-/issues/144 https://vigilance.fr/vulnerability/libxslt-use-after-free-via-XSL-Nodes-48412

Share on: