CVE-2025-10911

MEDIUM

Red Hat Enterprise Linux 10 - Use-After-Free in libxslt XSL Node Parser

Title source: llm
STIX 2.1

Description

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

References (17)

Core 17
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:11015
https://access.redhat.com/errata/RHSA-2026:11015
Vendor Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2025-10911
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:26355
https://access.redhat.com/errata/RHSA-2026:26355
Issue Tracking issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2397838
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:28243
https://access.redhat.com/errata/RHSA-2026:28243
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:28584
https://access.redhat.com/errata/RHSA-2026:28584
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:29807
https://access.redhat.com/errata/RHSA-2026:29807
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:29809
https://access.redhat.com/errata/RHSA-2026:29809
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:29811
https://access.redhat.com/errata/RHSA-2026:29811
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:29814
https://access.redhat.com/errata/RHSA-2026:29814
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:29975
https://access.redhat.com/errata/RHSA-2026:29975
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:29976
https://access.redhat.com/errata/RHSA-2026:29976
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:30847
https://access.redhat.com/errata/RHSA-2026:30847
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:33313
https://access.redhat.com/errata/RHSA-2026:33313
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:44481
https://access.redhat.com/errata/RHSA-2026:44481

Scores

CVSS v3 5.5
EPSS 0.0016
EPSS Percentile 5.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-825
Status published
Products (24)
Red Hat/Red Hat Discovery 2 1782756541
Red Hat/Red Hat Enterprise Linux 10
Red Hat/Red Hat Enterprise Linux 10 0:1.1.39-8.el10_2.1
Red Hat/Red Hat Enterprise Linux 10.0 Extended Update Support 0:1.1.39-8.el10_0.1
Red Hat/Red Hat Enterprise Linux 6
Red Hat/Red Hat Enterprise Linux 7
Red Hat/Red Hat Enterprise Linux 8
Red Hat/Red Hat Enterprise Linux 8 0:1.1.32-6.4.el8_10
Red Hat/Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 0:1.1.32-8.el8_4.1
Red Hat/Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 0:1.1.32-8.el8_4.1
... and 14 more
Published Sep 25, 2025
Tracked Since Feb 18, 2026