CVE record · CVE-2025-10911

Libxslt: use-after-free with key data stored cross-rvt

CVSS 5.5 MediumEPSS 0.0017 · 6th percentile

Published by the CVE Program (CNA: redhat) at 25 Sept 2025, 15:13 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Not given	Not given Package name: libxslt https://gitlab.gnome.org/GNOME/libxslt	affected 1.1.43 and earlier semver Other versions: unaffected
Red Hat	Red Hat Enterprise Linux 10 Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.39-8.el10_2.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.39-8.el10_0.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8 Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.32-6.4.el8_10 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8 Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.32-6.4.el8_10 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.32-8.el8_4.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.32-8.el8_4.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.32-8.el8_6.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.32-8.el8_6.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.32-8.el8_8.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.32-8.el8_8.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9 Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.34-14.el9_8.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.34-12.el9_2 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.34-15.el9_4 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	unaffected 0:1.1.34-13.el9_6.2 to before * rpm Other versions: affected
Red Hat	Red Hat Discovery 2 Package name: discovery/discovery-ui-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1782756541 to before * rpm Other versions: affected
Red Hat	Red Hat Hardened Images Package name: libxslt-main https://catalog.redhat.com/software/containers/	unaffected 1.1.45-0.1.hum1 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhai/base-image-neuron-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790703542 to before * rpm Other versions: affected
Red Hat	Red Hat Update Infrastructure 5 Package name: rhui5/rhua-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1784795076 to before * rpm Other versions: affected
Red Hat	Red Hat Update Infrastructure 5 Package name: rhui5/rhua-tp-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1787241260 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 6 Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	No versions given Other versions: affected
Red Hat	Red Hat Enterprise Linux 7 Package name: libxslt https://access.redhat.com/downloads/content/package-browser/	No versions given Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 4 Package name: openshift/ose-rhel-coreos-8 https://access.redhat.com/downloads/content/package-browser/	No versions given Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 4 Package name: openshift/ose-rhel-coreos-9 https://access.redhat.com/downloads/content/package-browser/	No versions given Other versions: affected

Identifiers: CVE-2025-10911
CNA: redhat
Weakness (CWE): CWE-825
Tags: Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 10.0 Extended Update Support
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Memory corruption
Published: 25 Sept 2025
Updated: 5 Nov 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
5.5	Medium	3.1	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	CNA (redhat)

CISA KEV Not listed.
EPSS 0.0017, the 6th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

25 Sept 2025, 15:13 UTC Confirmed by the CVE List
25 Sept 2025, 16:15 UTC Confirmed by NVD

Sources

References from the CNA

access.redhat.com/errata/RHSA-2026:11015 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:26355 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:28243 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:28584 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:29807 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:29809 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:29811 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:29814 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:29975 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:29976 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:30847 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:33313 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:44481 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:58981 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:74674 vendor-advisoryredhat
access.redhat.com/security/cve/CVE-2025-10911 vdb-entryredhat
bugzilla.redhat.com/show_bug.cgi?id=2397838 issue-trackingredhat
gitlab.gnome.org/GNOME/libxslt/-/issues/144
gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.