CVE-2025-12748

EIP tracks 1 public exploit for CVE-2025-12748. PoCs published by TERESH1.

AI-analyzed exploit summary This PoC demonstrates a denial-of-service (DoS) vulnerability in libvirt's XML file processing, where ACL checks are bypassed, allowing resource exhaustion via a crafted XML file. The exploit requires a restricted user with limited permissions to trigger excessive resource consumption.

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.