CVE-2025-6021
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
- Affected products
- Alt Linux, Almalinux, Astra Linux, Centos, Debian, Ibm Aix, Java Platform, Linuxmint
- Xmlsoft libxml2
- < 2.14.4
- CVSS 3.1
- 7.5 HIGH
- EPSS
- 1.1% (63th percentile)
- Weakness
- CWE-787
- NVD status
- Modified
- Published
- 2025-06-12
Workaround
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Users are strongly advised to apply vendor-supplied patches as soon as they become available to address the underlying integer overflow flaw in the affected code.
No indexed exploits for CVE-2025-6021 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2025-6021 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.