CVE-2025-32415: xmlsoft libxml2
CVSS: 7.5v3.1HighModified
AliasesALPINE-CVE-2025-32415RHSA-2025:13203RHSA-2025:13688RHSA-2025:13689RHSA-2025:13788RHSA-2025:13789RHSA-2025:13806UBUNTU-CVE-2025-32415DEBIAN-CVE-2025-32415CGA-g4wj-wjvf-95wqCGA-wvpw-xmgq-pqm9CGA-2jc3-q7xp-c6hhCGA-37q5-24j3-w94mCGA-3jph-34v7-7jh4CGA-48qg-wh2w-3pfhCGA-4c7h-85j5-6p2qCGA-5c45-vmfx-3vwwCGA-66wh-jmg7-gm2gCGA-67qm-rvf5-8963CGA-6fjg-53rj-3p98CGA-72gp-j463-p3vhCGA-8cqp-3qwx-3grvCGA-8f68-8w5g-428jCGA-8rwr-gvh9-2x52CGA-8wg7-xv8w-h5pcCGA-92rp-wpw2-8pp2CGA-c977-r7rm-43fwCGA-f58f-3v65-rh9pCGA-fcm7-4wfw-5j8qCGA-g5p6-vjx9-7m9fCGA-hm6c-f56v-8rw5CGA-hvw2-424p-grxjCGA-jwcj-h4x7-g2wqCGA-jx3r-gccc-xvmrCGA-m37j-m7mm-6727CGA-m53q-4q2j-jcx4CGA-r44p-8ggp-x476CGA-r7cc-pc49-4v4qCGA-r9jx-4mcq-w775CGA-w4h8-fhp5-xgq8CGA-wfj2-9wh8-7q86CGA-wm75-h9xh-gc7qCGA-x3g9-2f3f-px69
Published 17-04-2025Last modified 03-11-2025
Vulnerability summary
CVE-2025-32415 is a high (CVSS 7.5) vulnerability in xmlsoft libxml2. EPSS estimates a 0.59% chance of exploitation in the next 30 days, higher than 47.2% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.5/10
010
High · v3.1 (NVD)EPSS score
0.59%
0%100%
Low · -0.04 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Advisory lineage
Upstream 0 · Downstream 19 · Related 15DLA-4146-1DSA-5949-1MGASA-2025-0139OPENSUSE-SU-2025:15019-1RHSA-2025:13428RHSA-2025:13429RHSA-2025:13677RHSA-2025:13683RHSA-2025:13684RHSA-2026:7519SUSE-SU-2025:1435-1SUSE-SU-2025:1438-1SUSE-SU-2025:1439-1SUSE-SU-2025:1440-1SUSE-SU-2025:20333-1SUSE-SU-2025:20364-1USN-7467-1USN-7467-2USN-7896-1CGA-6GGF-HVVG-JPPHCGA-C6GR-26M7-5WC7CGA-FJ6R-GV9P-52FPCGA-H6FQ-HFPC-Q32MCGA-WW46-QF6W-54X3
Timeline
- 17-04-2025PublishedVulnerability first disclosed.
- 03-11-2025Last modifiedVulnerability information updated.
Description
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
CVSS metrics
8 scores · 8 sources · 1 versionHigh 7.5Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSources8 sources · 2.9–7.5
- CVE.orgCNA2.9LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:LDiffers
- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · Red hatEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · WolfiEcosystem advisory · calculated2.9LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:LDiffers
- OSV · ChainguardEcosystem advisory · calculated2.9LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:LDiffers
EPSS trend
Probability
0.59%
Chance of exploitation in the next 30 days
Percentile
47%
Versus all other CVEs
30-day change
-0.04 pp
From 0.63% on 20-09-2026
20-09-202620-10-2026
EPSS score0.59%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (gitlab.gnome.org)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-1284Improper Validation of Specified Quantity in InputThe product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
- CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.
Affected systems
Chainguard17 products
- openjdk-11-openj9-default-policy< 0.53.0-r0
- openjdk-17-openj9-default-policy< 0.53.0-r0
- openjdk-21-openj9-default-policy< 0.53.0-r0
- openjdk-25-openj9< 0.59.0-r1
- openjdk-25-openj9-dbg< 0.59.0-r1
Redhat8 products
- libxml2< 0:2.9.7-21.el8_10.3 | < 0:2.9.7-13.el8_6.12 | < 0:2.9.7-9.el8_2.5 | < 0:2.9.7-9.el8_4.8 | < 0:2.9.1-6.el7_9.13 | < 0:2.9.7-16.el8_8.12
- libxml2-debuginfo< 0:2.9.7-21.el8_10.3 | < 0:2.9.7-13.el8_6.12 | < 0:2.9.7-9.el8_2.5 | < 0:2.9.7-9.el8_4.8 | < 0:2.9.1-6.el7_9.13 | < 0:2.9.7-16.el8_8.12
- libxml2-debugsource< 0:2.9.7-21.el8_10.3 | < 0:2.9.7-13.el8_6.12 | < 0:2.9.7-9.el8_2.5 | < 0:2.9.7-9.el8_4.8 | < 0:2.9.7-16.el8_8.12
- libxml2-devel< 0:2.9.7-21.el8_10.3 | < 0:2.9.7-13.el8_6.12 | < 0:2.9.7-9.el8_2.5 | < 0:2.9.7-9.el8_4.8 | < 0:2.9.1-6.el7_9.13 | < 0:2.9.7-16.el8_8.12
- libxml2-python< 0:2.9.1-6.el7_9.13
Alpine1 product
- libxml2≥ 2.14.0, < 2.11.8-r3 | ≥ 2.14.0, < 2.12.10-r0 | ≥ 2.14.0, < 2.13.4-r6 | ≥ 2.14.0, < 2.13.8-r0
Debian1 product
- libxml2< 2.9.14+dfsg-1.3~deb12u2 | < 2.12.7+dfsg+really2.9.14-1
Ubuntu1 product
- libxml2< 2.9.1+dfsg1-3ubuntu4.13+esm10 | < 2.9.3+dfsg1-1ubuntu0.7+esm8 | < 2.9.4+dfsg1-6.1ubuntu1.9+esm3 | < 2.9.10+dfsg-5ubuntu0.20.04.10 | < 2.9.13+dfsg-1ubuntu0.7 | < 2.9.14+dfsg-1.3ubuntu3.3 | < 2.12.7+dfsg+really2.9.14-0.4ubuntu0.1
Wolfi1 product
- openjdk-7-jreAll versions (No fix recorded)
Xmlsoft1 product
- libxml2< 2.13.8 | ≥ 2.14.0, < 2.14.2
7 vendors · 30 products
