UBUNTU-CVE-2025-7425

    Dashboard / Vulnerabilities / UBUNTU-CVE-2025-7425

    UBUNTU-CVE-2025-7425

    Published: 10 Jul 2025Last Modified: 20 May 2026
    Upstream:
    CVE-2025-7425

    Summary:

    Details: A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.

    References: https://ubuntu.com/security/CVE-2025-7425, https://www.cve.org/CVERecord?id=CVE-2025-7425, https://access.redhat.com/security/cve/CVE-2025-7425, https://ubuntu.com/security/notices/USN-7852-1, https://ubuntu.com/security/notices/USN-7852-2, https://ubuntu.com/security/notices/USN-7896-1

    Affected packages

    Package

    Name: libxml2

    Purl: pkg:deb/ubuntu/libxml2?arch=source&distro=esm-infra-legacy%2Ftrusty

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2.9.1+dfsg1-3ubuntu4.13+esm10

    Affected versions

    2.9.1+dfsg1-3ubuntu2
    2.9.1+dfsg1-3ubuntu3
    2.9.1+dfsg1-3ubuntu4
    2.9.1+dfsg1-3ubuntu4.1
    2.9.1+dfsg1-3ubuntu4.2
    2.9.1+dfsg1-3ubuntu4.3
    2.9.1+dfsg1-3ubuntu4.4
    2.9.1+dfsg1-3ubuntu4.5
    2.9.1+dfsg1-3ubuntu4.6
    2.9.1+dfsg1-3ubuntu4.7
    2.9.1+dfsg1-3ubuntu4.8
    2.9.1+dfsg1-3ubuntu4.9
    2.9.1+dfsg1-3ubuntu4.10
    2.9.1+dfsg1-3ubuntu4.11
    2.9.1+dfsg1-3ubuntu4.12
    2.9.1+dfsg1-3ubuntu4.13
    2.9.1+dfsg1-3ubuntu4.13+esm1
    2.9.1+dfsg1-3ubuntu4.13+esm2
    2.9.1+dfsg1-3ubuntu4.13+esm3
    2.9.1+dfsg1-3ubuntu4.13+esm4
    2.9.1+dfsg1-3ubuntu4.13+esm5
    2.9.1+dfsg1-3ubuntu4.13+esm6
    2.9.1+dfsg1-3ubuntu4.13+esm7
    2.9.1+dfsg1-3ubuntu4.13+esm8
    2.9.1+dfsg1-3ubuntu4.13+esm9

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2025-7425 | CVE-DB