CVE-2025-9714

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.

Affected products

Alt Linux, Almalinux, Debian, Linuxmint, Red Hat, Red Os, Rocky Linux, Suse

Xmlsoft libxml2

< 2.10.0

Fix

Available

CVSS 3.1

6.2 MEDIUM

EPSS

0.1% (4th percentile)

Weakness

CWE-674

NVD status

Modified

Published

2025-09-10

Attack patterns

CAPEC-130

No exploit for CVE-2025-9714 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.