A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
CVE-2025-6021
CVSS base score
7.5 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-787
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
xmlsoft libxml2
redhat jboss core services
redhat openshift container platform
redhat openshift container platform for arm64
redhat openshift container platform for ibm z
redhat openshift container platform for linuxone
redhat openshift container platform for power
redhat enterprise linux
redhat enterprise linux eus
redhat enterprise linux for arm 64
References
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory