CVE-2025-27113

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

Open
LOW (1.6)
  • T

    Tim Bastin detected CVE-2025-27113 with a risk of 1.65

  • logo

    System updated the risk assessment to 0.82

    System recalculated raw risk assessment

  • T

    Tim Bastin detected CVE-2025-27113 with a risk of 0.82

  • logo

    System updated the risk assessment from 0.82 to 0.54

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.54 to 1.65

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.82 to 1.65

    System recalculated raw risk assessment

  • T

    Tim Bastin detected CVE-2025-27113 with a risk of 1.65

  • T

    Tim Bastin detected CVE-2025-27113 with a risk of 1.65

  • logo

    System fixed CVE-2025-27113

  • logo

    System fixed CVE-2025-27113

  • logo

    System fixed CVE-2025-27113

  • logo

    System fixed CVE-2025-27113

  • logo

    System detected CVE-2025-27113 with a risk of 1.65

Add a comment

Mark as False Positive
Last calculated at:

Affected component

debian/libxml2

Installed version:
2.9.14
Fixed in:
no patch available

Management decisions across the organization

Copyright © 2025 L3montree GmbH and the DevGuard Contributors. All rights reserved. Version 2ab7b793efd72421aea8c3a994ac60202bf1b3a5