ALPINE-CVE-2025-27113 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2025-27113 PUBLISHED CVSS 7.5 HIGH

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

Risk Scores

CVSS v3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Alpine:v3.21	libxml2	2.10.0-r0, 2.9.5-r0, 2.9.4-r4
Alpine:v3.22	libxml2	2.9.9-r3, 2.9.9-r2, 2.9.9-r1
Alpine:v3.23	libxml2	2.9.9-r3, 0, 2.10.0-r0
Alpine:v3.19	libxml2	2.7.8-r6, 2.7.8-r5, 2.7.8-r4
Alpine:v3.20	libxml2	2.9.4-r2, 2.8.0-r1, 2.9.0-r0
Alpine:v3.18	libxml2	2.7.8-r5, 2.7.8-r4, 2.7.8-r2

Timeline

Feb 18, 2025 CVE Published
Dec 3, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2025-27113 advisory

Open in Interactive Console →