Buffer overflow in Xmlsoft Libxml2
CVE-2025-6170
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
Vulnerability class: Buffer Overflow
EPSS: 0.002 (11.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.5 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L.
Affected products
- Xmlsoft Libxml2
- Red Hat Discovery 2 — versions 1784821670, 1784821750
- Red Hat Enterprise Linux 10 — versions 0:2.12.5-10.el10_2.2
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8 — versions 0:2.9.7-21.el8_10.6
- Red Hat Enterprise Linux 9 — versions 0:2.9.13-14.el9_8.2
- Red Hat Hardened Images — versions 2.15.2-0.3.hum1
- Red Hat Insights Proxy 1.5 — versions 1786433656
- Red Hat In-vehicle Operating System 1
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, Third Party Advisory, Mitigation, vdb-entry)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking, Third Party Advisory, Issue Tracking)
- secalert@redhat.com
- af854a3a-2127-422b-91ae-364da2661108
- 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
Frequently asked questions
- What is CVE-2025-6170?
- CVE-2025-6170 is a low-severity vulnerability in Xmlsoft Libxml2, classified under Stack-based Buffer Overflow. CVSS score: 2.5/10. Published 2025-06-16.
- How severe is CVE-2025-6170?
- Low severity. CVSS v3 base score is 2.5 out of 10.
- Is CVE-2025-6170 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.