5.5

CVE-2025-10911: libxslt Expired Pointer Dereference

CVSS: 5.5v3.1MediumDeferred
AliasesSUSE-SU-2025:03491-1SUSE-SU-2025:03595-1SUSE-SU-2026:0801-1
Published 25-09-2025Last modified 02-10-2026
Open JSON

Vulnerability summary

CVE-2025-10911 is a medium (CVSS 5.5) Expired Pointer Dereference vulnerability in libxslt. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 6.2% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.17%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 20 · Related 19
OPENSUSE-SU-2025:20050-1OPENSUSE-SU-2026:10167-1OPENSUSE-SU-2026:20312-1RHSA-2026:11015RHSA-2026:29811SUSE-SU-2025:20892-1

Timeline

  1. 25-09-2025
    PublishedVulnerability first disclosed.
  2. 02-10-2026
    Last modifiedVulnerability information updated.

Description

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

CVSS metrics

7 scores · 7 sources · 1 version

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

6%

Versus all other CVEs

30-day change

0.00 pp

From 0.17% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard43 products
  • libxsltAll versions (No fix recorded)
  • libxslt-devAll versions (No fix recorded)
  • libxslt-docAll versions (No fix recorded)
  • libxslt-staticAll versions (No fix recorded)
  • openjdk-11-openj9< 0.59.0-r2
Suse7 products
  • libxslt&distro=SUSE Linux Enterprise Micro 5.1< 1.1.32-150000.3.20.1 | < 1.1.32-150000.3.25.1
  • libxslt&distro=SUSE Linux Enterprise Micro 5.2< 1.1.32-150000.3.20.1 | < 1.1.32-150000.3.25.1
  • libxslt&distro=SUSE Linux Enterprise Micro 5.3< 1.1.34-150400.3.16.1
  • libxslt&distro=SUSE Linux Enterprise Micro 5.4< 1.1.34-150400.3.16.1
  • libxslt&distro=SUSE Linux Enterprise Micro 5.5< 1.1.34-150400.3.16.1
Redhat4 products
  • libxslt< 0:1.1.32-6.4.el8_10 | < 0:1.1.34-14.el9_8.1 | < 0:1.1.39-8.el10_2.1 | < 0:1.1.34-13.el9_6.2 | < 0:1.1.39-8.el10_0.1 | < 0:1.1.34-15.el9_4 | < 0:1.1.32-8.el8_4.1 | < 0:1.1.32-8.el8_8.1 | < 0:1.1.32-8.el8_6.1
  • libxslt-debuginfo< 0:1.1.32-6.4.el8_10 | < 0:1.1.34-14.el9_8.1 | < 0:1.1.39-8.el10_2.1 | < 0:1.1.34-13.el9_6.2 | < 0:1.1.39-8.el10_0.1 | < 0:1.1.34-15.el9_4 | < 0:1.1.32-8.el8_4.1 | < 0:1.1.32-8.el8_8.1 | < 0:1.1.32-8.el8_6.1
  • libxslt-debugsource< 0:1.1.32-6.4.el8_10 | < 0:1.1.34-14.el9_8.1 | < 0:1.1.39-8.el10_2.1 | < 0:1.1.34-13.el9_6.2 | < 0:1.1.39-8.el10_0.1 | < 0:1.1.34-15.el9_4 | < 0:1.1.32-8.el8_4.1 | < 0:1.1.32-8.el8_8.1 | < 0:1.1.32-8.el8_6.1
  • libxslt-devel< 0:1.1.32-6.4.el8_10 | < 0:1.1.34-14.el9_8.1 | < 0:1.1.39-8.el10_2.1 | < 0:1.1.34-13.el9_6.2 | < 0:1.1.39-8.el10_0.1 | < 0:1.1.34-15.el9_4 | < 0:1.1.32-8.el8_4.1 | < 0:1.1.32-8.el8_8.1 | < 0:1.1.32-8.el8_6.1
Wolfi4 products
  • libxsltAll versions (No fix recorded)
  • libxslt-devAll versions (No fix recorded)
  • libxslt-docAll versions (No fix recorded)
  • libxslt-staticAll versions (No fix recorded)
Opensuse3 products
  • libxslt-python&distro=openSUSE Leap 15.6< 1.1.32-150000.3.20.1 | < 1.1.32-150000.3.25.1
  • libxslt&distro=openSUSE Leap 15.6< 1.1.34-150400.3.16.1
  • libxslt&distro=openSUSE Tumbleweed< 1.1.43-3.1
Debian1 product
  • libxsltAll versions (No fix recorded) | < 1.1.43-0.3
Ubuntu1 product
  • libxsltAll versions (No fix recorded) | < 1.1.43-0.3

7 vendors · 63 products

References

42 links
Show all 42 references