CVE-2025-9714
6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions xmlXPathRunEval, xmlXPathCtxtCompile, and xmlXPathEvalExpr were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| libxml2 | libxml2 | 0 < 2.10.0 | affected |
| libxml2 | libxml2 | 0 < 2.12.7+dfsg+really2.9.14-0.4ubuntu0.3 | affected |
| libxml2 | libxml2 | 0 < 2.9.14+dfsg-1.3ubuntu3.5 | affected |
| libxml2 | libxml2 | 0 < 2.9.13+dfsg-1ubuntu0.9 | affected |
| libxml2 | libxml2 | 0 < 2.9.10+dfsg-5ubuntu0.20.04.10+esm2 | affected |
| libxml2 | libxml2 | 0 < 2.9.4+dfsg1-6.1ubuntu1.9+esm5 | affected |
| libxml2 | libxml2 | 0 < 2.9.3+dfsg1-1ubuntu0.7+esm10 | affected |
| libxml2 | libxml2 | 0 < 2.9.1+dfsg1-3ubuntu4.13+esm9 | affected |
Weaknesses
- CWE-674: CWE-674 Uncontrolled Recursion
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
CVE Program Container
Additional References
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.