All vulnerabilities

Servers and applications

CVE-2025-8732

A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment.…

Severity
Low 1.9
Published
8 Aug 2025
Last changed
1 Jul 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.15.2
Sources
NVD

Affected software

SoftwareAffected versions
libxml2Servers and applications · cpe:a:xmlsoft:libxml2
  • Every version before 2.15.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-8732
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-8732