Vulnerability Description
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Xmlsoft | Libxml2 | < 2.13.8 |
Related Weaknesses (CWE)
References
- https://gitlab.gnome.org/GNOME/libxml2/-/issues/889ExploitIssue TrackingPatch
- https://lists.debian.org/debian-lts-announce/2025/04/msg00041.html
- https://gitlab.gnome.org/GNOME/libxml2/-/issues/889ExploitIssue TrackingPatch
FAQ
What is CVE-2025-32414?
CVE-2025-32414 is a vulnerability with a CVSS score of 5.6 (MEDIUM). In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and ...
How severe is CVE-2025-32414?
CVE-2025-32414 has been rated MEDIUM with a CVSS base score of 5.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-32414?
Check the references section above for vendor advisories and patch information. Affected products include: Xmlsoft Libxml2.