Vulnerability details
CVE-2025-7425
GNOME libxml2Siemens RUGGEDCOM ROX MX5000Siemens RUGGEDCOM ROX MX5000RESiemens RUGGEDCOM ROX RX1400Siemens RUGGEDCOM ROX RX1500Siemens RUGGEDCOM ROX RX1501
Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
CVSS 3.1
7.8High
Official description
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.8High | 3.1 | CVEProject cvelistV5 (CNA) (redhat) | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| GNOME | libxml2 | v < 2.15.2 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX MX5000 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX MX5000RE | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1400 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1500 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1501 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1510 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1511 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1512 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1524 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX1536 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM ROX RX5000 | v < V2.17.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC CN 4100 | v < V5.0 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | V3.1.5 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | V3.1.5 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.5 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.5 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | v < V1.1.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | V3.1.5 ≤ v | CVEProject cvelistV5 (CNA) |
References and advisories
43- https://access.redhat.com/errata/RHBA-2025:12345 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:12447 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:12450 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13267 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13308 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13309 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13310 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13311 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13312 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13313 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13314 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13335 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13464 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:13622 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:14059 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:14396 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:14818 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:14819 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:14853 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:14858 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:15308 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:15672 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:15827 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:15828 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:18219 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:21885 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:21913 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0934 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11503 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2025-7425 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2379274 issue-trackingx_refsource_REDHAT
- https://gitlab.gnome.org/GNOME/libxslt/-/issues/140
- https://lists.debian.org/debian-lts-announce/2025/09/msg00035.html
- http://seclists.org/fulldisclosure/2025/Aug/0
- http://seclists.org/fulldisclosure/2025/Jul/37
- http://seclists.org/fulldisclosure/2025/Jul/35
- http://seclists.org/fulldisclosure/2025/Jul/32
- http://seclists.org/fulldisclosure/2025/Jul/30
- http://www.openwall.com/lists/oss-security/2025/07/11/2
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-577017.html
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-07-10
- Last updated
- 2026-11-06
- State
- Published
- Assigner (CNA)
- redhat
Exploit prediction (EPSS)
0.44%
Probability of exploitation in 30 days
38.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Proof of concept
- Technical impact
- Total
Weaknesses (CWE)
- CWE-416Use After Free