VDB
GCVE-110-MAGEIA-2025-110
GCVE-110-MAGEIA-2025-110
Advisory Published
xsltGetInheritedNsList in libxslt has a use-after-free issue related to
exclusion of result prefixes (CVE-2024-55549).
numbers.c in libxslt has a use-after-free because, in nested XPath
evaluations, an XPath context node can be modified but never restored.
This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate,
xsltEvalXPathStringNs, and xsltComputeSortResultInternal
(CVE-2025-24855).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | brasero | 0 (affected), 3.12.3-5.2.mga9 (unaffected) | — |
| Mageia | libxslt | 0 (affected), 1.1.38-1.1.mga9 (unaffected), 0 (affected), 1.1.38-1.1.mga9 (unaffected) | — |
References
Updated brasero packages fix bug
advisory
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.