Security Advisory

CVE-2025-32415

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-17 00:00:00
Last updated 2025-11-03 19:53:26
Assigner mitre
State PUBLISHED

Description

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.