CVE-2025-49794: Libxml: heap use after free (uaf) leads to denial of service (dos)
A Heap Use After Free (UAF) vulnerability was discovered in the Schematron in the libxml2. The issue arises in the xmlSchematronGetNode function when processing XPath expressions in Schematron schema elements <sch:name path="..."/>, where a pointer to freed memory is returned and then accessed, leading to undefined behavior and potential crashes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49794?
CVE-2025-49794 is classified as a high severity vulnerability due to its potential for exploitation through a use after free condition.
How do I fix CVE-2025-49794?
To fix CVE-2025-49794, update to the latest version of the libxml2 library where the vulnerability has been patched.
What systems are affected by CVE-2025-49794?
CVE-2025-49794 affects versions of the libxml2 library used in various software applications that utilize XML processing.
What type of vulnerability is CVE-2025-49794?
CVE-2025-49794 is a heap use after free (UAF) vulnerability that can lead to application crashes or potential code execution.
When was CVE-2025-49794 discovered?
CVE-2025-49794 was discovered recently, highlighting a significant security flaw within the libxml2 library.