CVE-2025-49795: Libxml: null pointer dereference leads to denial of service (dos)
A null pointer dereference vulnerability was discovered in the libxml2. The issue occurs in the xmlSchematronFormatReport function when processing incorrect XPath expressions in Schematron schema reports, leading to undefined behavior and potential crashes.
Other sources
A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49795?
CVE-2025-49795 is considered a high severity vulnerability due to the potential for crashes and undefined behavior.
How do I fix CVE-2025-49795?
To fix CVE-2025-49795, update libxml2 to the latest version that addresses this null pointer dereference vulnerability.
What software is affected by CVE-2025-49795?
CVE-2025-49795 affects libxml2, specifically when processing incorrect XPath expressions in Schematron schema reports.
What type of vulnerability is CVE-2025-49795?
CVE-2025-49795 is a null pointer dereference vulnerability that leads to undefined behavior.
What are the potential consequences of CVE-2025-49795?
The potential consequences of CVE-2025-49795 include application crashes and instability when processing malicious or incorrectly formatted input.