1. Home
  2. CVE Database
  3. CVE-2025-6021
HIGH · 7.5

CVE-2025-6021

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a den...

Vulnerability Description

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
XmlsoftLibxml2< 2.14.4
RedhatJboss Core Services-
RedhatOpenshift Container Platform4.12
RedhatOpenshift Container Platform For Arm644.13
RedhatOpenshift Container Platform For Ibm Z4.13
RedhatOpenshift Container Platform For Linuxone4.13
RedhatOpenshift Container Platform For Power4.13
RedhatEnterprise Linux8.0
RedhatEnterprise Linux Eus8.4
RedhatEnterprise Linux For Arm 648.0_aarch64
RedhatEnterprise Linux For Arm 64 Eus9.4_aarch64
RedhatEnterprise Linux For Ibm Z Systems8.0_s390x
RedhatEnterprise Linux For Ibm Z Systems Eus9.0_s390x
RedhatEnterprise Linux For Power Little Endian8.0_ppc64le
RedhatEnterprise Linux For Power Little Endian Eus9.4_ppc64le
RedhatEnterprise Linux Server7.0
RedhatEnterprise Linux Server Aus8.2
RedhatEnterprise Linux Server For Power Little Endian Update Services For Sap Solutions9.4_ppc64le
RedhatEnterprise Linux Server Tus8.8
RedhatIn-Vehicle Operating System1.0

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2025-6021?

CVE-2025-6021 is a vulnerability with a CVSS score of 7.5 (HIGH). A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a den...

How severe is CVE-2025-6021?

CVE-2025-6021 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-6021?

Check the references section above for vendor advisories and patch information. Affected products include: Xmlsoft Libxml2, Redhat Jboss Core Services, Redhat Openshift Container Platform, Redhat Openshift Container Platform For Arm64, Redhat Openshift Container Platform For Ibm Z.