CVE-2025-24928

No indexed exploits for CVE-2025-24928 yet

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Affected products: Alt Linux, Almalinux, Astra Linux, Centos, Debian, Ibm Aix, Linuxmint, Red Hat
Netapp Active Iq Unified Manager: All versions
Netapp Manageability Software Development Kit: All versions
Netapp Ontap: = 9
Netapp Solidfire \& Hci Management Node: All versions
Xmlsoft libxml2: < 2.12.10, 2.13.6

Fix: Available
CVSS 3.1: 7.8 HIGH
EPSS: 0.4% (30th percentile)
Weakness: CWE-121
NVD status: Modified
Published: 2025-02-18

CVE-2025-24928 at NVD

Authoritative description, scoring and affected products

No exploit for CVE-2025-24928 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.