CVE-2025-24928

{"id": "CVE-2025-24928", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 1.4}]}, "published": "2025-02-18T23:15:10.250", "references": [{"url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/847", "source": "cve@mitre.org"}, {"url": "https://issues.oss-fuzz.com/issues/392687022", "source": "cve@mitre.org"}, {"url": "https://security.netapp.com/advisory/ntap-20250321-0006/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cve@mitre.org", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047."}, {"lang": "es", "value": "LibXML2 antes de 2.12.10 y 2.13.x antes de 2.13.6 tiene un desbordamiento de b\u00fafer basado en pila en XMLSNPrintfelements en Valid.c. Para explotar esto, la validaci\u00f3n de DTD debe ocurrir para un documento no confiable o DTD no confiable. Nota: Esto es similar a CVE-2017-9047."}], "lastModified": "2025-03-21T18:15:34.860", "sourceIdentifier": "cve@mitre.org"}