Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-32415

Fixed in a distro release EPSS <1%CVSS 2.9

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Published 2025-04-17 · CVE record · OSV

Products: xmlsoft libxml2

Distro releases

ReleasePackageFixed in
AlmaLinux 10libxml22.12.5-9.el10_0
AlmaLinux 10libxml2-devel2.12.5-9.el10_0
AlmaLinux 10libxml2-static2.12.5-9.el10_0
AlmaLinux 10python3-libxml22.12.5-9.el10_0
AlmaLinux 8libxml22.9.7-21.el8_10.3
AlmaLinux 8libxml2-devel2.9.7-21.el8_10.3
AlmaLinux 8python3-libxml22.9.7-21.el8_10.3
AlmaLinux 9libxml22.9.13-12.el9_6
AlmaLinux 9libxml2-devel2.9.13-12.el9_6
AlmaLinux 9python3-libxml22.9.13-12.el9_6
Alpine 3.18libxml22.11.8-r3
Alpine 3.19libxml22.11.8-r3
Alpine 3.20libxml22.12.10-r0
Alpine 3.21libxml22.13.4-r6
Alpine 3.22libxml22.13.8-r0
Alpine 3.23libxml22.13.8-r0
Alpine 3.24libxml22.13.8-r0
Amazon Linux 2libxml22.9.1-6.amzn2.5.17
Amazon Linux 2libxml2-devel2.9.1-6.amzn2.5.17
Amazon Linux 2libxml2-python2.9.1-6.amzn2.5.17
Amazon Linux 2libxml2-static2.9.1-6.amzn2.5.17
Amazon Linux 2023libxml22.10.4-1.amzn2023.0.10
Amazon Linux 2023libxml2-devel2.10.4-1.amzn2023.0.10
Amazon Linux 2023libxml2-static2.10.4-1.amzn2023.0.10
Amazon Linux 2023python3-libxml22.10.4-1.amzn2023.0.10
Chainguardopenjdk-11-openj9-default-policy0.53.0-r0
Chainguardopenjdk-17-openj9-default-policy0.53.0-r0
Chainguardopenjdk-21-openj9-default-policy0.53.0-r0
Chainguardopenjdk-25-openj90.59.0-r1
Chainguardopenjdk-25-openj9-dbg0.59.0-r1
Chainguardopenjdk-25-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-25-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-25-openj9-jmods0.59.0-r1
Chainguardopenjdk-25-openj9-jre0.59.0-r1
Chainguardopenjdk-26-openj90.59.0-r1
Chainguardopenjdk-26-openj9-dbg0.59.0-r1
Chainguardopenjdk-26-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-26-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-26-openj9-jmods0.59.0-r1
Chainguardopenjdk-26-openj9-jre0.59.0-r1
Chainguardopenjdk-7-jreno fix
Chainguardopenjdk-8-openj9-dbg0.53.0-r1
Debian 11libxml22.9.10+dfsg-6.7+deb11u7
Debian 12libxml22.9.14+dfsg-1.3~deb12u2
Debian 13libxml22.12.7+dfsg+really2.9.14-1
Debian 14libxml22.12.7+dfsg+really2.9.14-1
Red Hat Enterprise Linux 10.0libxml20:2.12.5-9.el10_0
Red Hat Enterprise Linux 10.0libxml2-debuginfo0:2.12.5-9.el10_0
Red Hat Enterprise Linux 10.0libxml2-debugsource0:2.12.5-9.el10_0
Red Hat Enterprise Linux 10.0libxml2-devel0:2.12.5-9.el10_0
Red Hat Enterprise Linux 10.0libxml2-static0:2.12.5-9.el10_0
Red Hat Enterprise Linux 10.0python3-libxml20:2.12.5-9.el10_0
Red Hat Enterprise Linux 10.0python3-libxml2-debuginfo0:2.12.5-9.el10_0
Red Hat Enterprise Linux 8libxml20:2.9.7-21.el8_10.3
Red Hat Enterprise Linux 8libxml2-debuginfo0:2.9.7-21.el8_10.3
Red Hat Enterprise Linux 8libxml2-debugsource0:2.9.7-21.el8_10.3
Red Hat Enterprise Linux 8libxml2-devel0:2.9.7-21.el8_10.3
Red Hat Enterprise Linux 8python3-libxml20:2.9.7-21.el8_10.3
Red Hat Enterprise Linux 8python3-libxml2-debuginfo0:2.9.7-21.el8_10.3
Red Hat Enterprise Linux 9libxml20:2.9.13-12.el9_6
Red Hat Enterprise Linux 9libxml2-debuginfo0:2.9.13-12.el9_6
Red Hat Enterprise Linux 9libxml2-debugsource0:2.9.13-12.el9_6
Red Hat Enterprise Linux 9libxml2-devel0:2.9.13-12.el9_6
Red Hat Enterprise Linux 9python3-libxml20:2.9.13-12.el9_6
Red Hat Enterprise Linux 9python3-libxml2-debuginfo0:2.9.13-12.el9_6
Red Hat hummingbird 1libxml20:2.15.2-0.3.hum1
Red Hat hummingbird 1libxml2-160:2.15.2-0.3.hum1
Red Hat hummingbird 1libxml2-devel0:2.15.2-0.3.hum1
Red Hat hummingbird 1libxml2-static0:2.15.2-0.3.hum1
Red Hat hummingbird 1python3-libxml20:2.15.2-0.3.hum1
Red Hat rhel aus 8.2libxml20:2.9.7-9.el8_2.5
Red Hat rhel aus 8.2libxml2-debuginfo0:2.9.7-9.el8_2.5
Red Hat rhel aus 8.2libxml2-debugsource0:2.9.7-9.el8_2.5
Red Hat rhel aus 8.2libxml2-devel0:2.9.7-9.el8_2.5
Red Hat rhel aus 8.2python3-libxml20:2.9.7-9.el8_2.5
Red Hat rhel aus 8.2python3-libxml2-debuginfo0:2.9.7-9.el8_2.5
Red Hat rhel aus 8.4libxml20:2.9.7-9.el8_4.8
Red Hat rhel aus 8.4libxml2-debuginfo0:2.9.7-9.el8_4.8
Red Hat rhel aus 8.4libxml2-debugsource0:2.9.7-9.el8_4.8
Red Hat rhel aus 8.4libxml2-devel0:2.9.7-9.el8_4.8
Red Hat rhel aus 8.4python3-libxml20:2.9.7-9.el8_4.8
Red Hat rhel aus 8.4python3-libxml2-debuginfo0:2.9.7-9.el8_4.8
Red Hat rhel aus 8.6libxml20:2.9.7-13.el8_6.12
Red Hat rhel aus 8.6libxml2-debuginfo0:2.9.7-13.el8_6.12
Red Hat rhel aus 8.6libxml2-debugsource0:2.9.7-13.el8_6.12
Red Hat rhel aus 8.6libxml2-devel0:2.9.7-13.el8_6.12
Red Hat rhel aus 8.6python3-libxml20:2.9.7-13.el8_6.12
Red Hat rhel aus 8.6python3-libxml2-debuginfo0:2.9.7-13.el8_6.12
Red Hat rhel e4s 8.6libxml20:2.9.7-13.el8_6.12
Red Hat rhel e4s 8.6libxml2-debuginfo0:2.9.7-13.el8_6.12
Red Hat rhel e4s 8.6libxml2-debugsource0:2.9.7-13.el8_6.12
Red Hat rhel e4s 8.6libxml2-devel0:2.9.7-13.el8_6.12
Red Hat rhel e4s 8.6python3-libxml20:2.9.7-13.el8_6.12
Red Hat rhel e4s 8.6python3-libxml2-debuginfo0:2.9.7-13.el8_6.12
Red Hat rhel e4s 8.8libxml20:2.9.7-16.el8_8.12
Red Hat rhel e4s 8.8libxml2-debuginfo0:2.9.7-16.el8_8.12
Red Hat rhel e4s 8.8libxml2-debugsource0:2.9.7-16.el8_8.12
Red Hat rhel e4s 8.8libxml2-devel0:2.9.7-16.el8_8.12
Red Hat rhel e4s 8.8python3-libxml20:2.9.7-16.el8_8.12
Red Hat rhel e4s 8.8python3-libxml2-debuginfo0:2.9.7-16.el8_8.12
Red Hat rhel e4s 9.0libxml20:2.9.13-1.el9_0.7
Red Hat rhel e4s 9.0libxml2-debuginfo0:2.9.13-1.el9_0.7
Red Hat rhel e4s 9.0libxml2-debugsource0:2.9.13-1.el9_0.7
Red Hat rhel e4s 9.0libxml2-devel0:2.9.13-1.el9_0.7
Red Hat rhel e4s 9.0python3-libxml20:2.9.13-1.el9_0.7
Red Hat rhel e4s 9.0python3-libxml2-debuginfo0:2.9.13-1.el9_0.7
Red Hat rhel e4s 9.2libxml20:2.9.13-3.el9_2.9
Red Hat rhel e4s 9.2libxml2-debuginfo0:2.9.13-3.el9_2.9
Red Hat rhel e4s 9.2libxml2-debugsource0:2.9.13-3.el9_2.9
Red Hat rhel e4s 9.2libxml2-devel0:2.9.13-3.el9_2.9
Red Hat rhel e4s 9.2python3-libxml20:2.9.13-3.el9_2.9
Red Hat rhel e4s 9.2python3-libxml2-debuginfo0:2.9.13-3.el9_2.9
Red Hat rhel els 7libxml20:2.9.1-6.el7_9.13
Red Hat rhel els 7libxml2-debuginfo0:2.9.1-6.el7_9.13
Red Hat rhel els 7libxml2-devel0:2.9.1-6.el7_9.13
Red Hat rhel els 7libxml2-python0:2.9.1-6.el7_9.13
Red Hat rhel els 7libxml2-static0:2.9.1-6.el7_9.13
Red Hat rhel eus 9.4libxml20:2.9.13-12.el9_4
Red Hat rhel eus 9.4libxml2-debuginfo0:2.9.13-12.el9_4
Red Hat rhel eus 9.4libxml2-debugsource0:2.9.13-12.el9_4
Red Hat rhel eus 9.4libxml2-devel0:2.9.13-12.el9_4
Red Hat rhel eus 9.4python3-libxml20:2.9.13-12.el9_4
Red Hat rhel eus 9.4python3-libxml2-debuginfo0:2.9.13-12.el9_4
Red Hat rhel eus long life 8.4libxml20:2.9.7-9.el8_4.8
Red Hat rhel eus long life 8.4libxml2-debuginfo0:2.9.7-9.el8_4.8
Red Hat rhel eus long life 8.4libxml2-debugsource0:2.9.7-9.el8_4.8
Red Hat rhel eus long life 8.4libxml2-devel0:2.9.7-9.el8_4.8
Red Hat rhel eus long life 8.4python3-libxml20:2.9.7-9.el8_4.8
Red Hat rhel eus long life 8.4python3-libxml2-debuginfo0:2.9.7-9.el8_4.8
Red Hat rhel tus 8.6libxml20:2.9.7-13.el8_6.12
Red Hat rhel tus 8.6libxml2-debuginfo0:2.9.7-13.el8_6.12
Red Hat rhel tus 8.6libxml2-debugsource0:2.9.7-13.el8_6.12
Red Hat rhel tus 8.6libxml2-devel0:2.9.7-13.el8_6.12
Red Hat rhel tus 8.6python3-libxml20:2.9.7-13.el8_6.12
Red Hat rhel tus 8.6python3-libxml2-debuginfo0:2.9.7-13.el8_6.12
Red Hat rhel tus 8.8libxml20:2.9.7-16.el8_8.12
Red Hat rhel tus 8.8libxml2-debuginfo0:2.9.7-16.el8_8.12
Red Hat rhel tus 8.8libxml2-debugsource0:2.9.7-16.el8_8.12
Red Hat rhel tus 8.8libxml2-devel0:2.9.7-16.el8_8.12
Red Hat rhel tus 8.8python3-libxml20:2.9.7-16.el8_8.12
Red Hat rhel tus 8.8python3-libxml2-debuginfo0:2.9.7-16.el8_8.12
Rocky Linux 10libxml20:2.12.5-9.el10_0
Rocky Linux 8libxml20:2.9.7-21.el8_10.3
Rocky Linux 9libxml20:2.9.13-12.el9_6
SUSE Linux Enterprise Micro 5.1libxml22.9.7-150000.3.79.1
SUSE Linux Enterprise Micro 5.2libxml22.9.7-150000.3.79.1
SUSE Linux Enterprise Micro 5.2python-libxml2-python2.9.7-150000.3.79.1
SUSE Linux Enterprise Micro 5.3libxml22.9.14-150400.5.41.1
SUSE Linux Enterprise Micro 5.3libxml2-python2.9.14-150400.5.41.1
SUSE Linux Enterprise Micro 5.4libxml22.9.14-150400.5.41.1
SUSE Linux Enterprise Micro 5.4libxml2-python2.9.14-150400.5.41.1
SUSE Linux Enterprise Micro 5.5libxml22.10.3-150500.5.26.1
SUSE Linux Enterprise Micro 5.5libxml2-python2.10.3-150500.5.26.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libxml22.10.3-150500.5.26.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libxml2-python2.10.3-150500.5.26.1
SUSE Linux Enterprise Module for Python 3 15 SP6libxml2-python2.10.3-150500.5.26.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5libxml22.9.4-46.84.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5python-libxml22.9.4-46.84.1
SUSE Linux Micro 6.0libxml22.11.6-8.1
SUSE Linux Micro 6.1libxml22.11.6-slfo.1.1_3.1
Ubuntu 20.04 LTSlibxml22.9.10+dfsg-5ubuntu0.20.04.10
Ubuntu 22.04 LTSlibxml22.9.13+dfsg-1ubuntu0.7
Ubuntu 24.04 LTSlibxml22.9.14+dfsg-1.3ubuntu3.3
Ubuntu 25.10libxml22.12.7+dfsg+really2.9.14-0.4ubuntu0.1
Ubuntu Pro 14.04 LTSlibxml22.9.1+dfsg1-3ubuntu4.13+esm10
Ubuntu Pro 16.04 LTSlibxml22.9.3+dfsg1-1ubuntu0.7+esm8
Ubuntu Pro 18.04 LTSlibxml22.9.4+dfsg1-6.1ubuntu1.9+esm3
Wolfiopenjdk-7-jreno fix
openSUSE Leap 15.6libxml22.10.3-150500.5.26.1
openSUSE Leap 15.6libxml2-python2.10.3-150500.5.26.1
openSUSE Leap 15.6python-libxml2-python2.9.7-150000.3.79.1
openSUSE Tumbleweedlibxml22.13.8-1.1