yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2025-27113
Component Overview
Vulnerability Overview
Name
CVE-2025-27113
Source
NVD (
link
)
Debian (
link
)
Description
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
CWEs
CWE-476
CWE-476
Published Date
Feb 18, 2025
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://gitlab.gnome.org/GNOME/libxml2/-/issues/861
Exploit
Analysis
#
Affected Component
Analysis
libxml2
Patched
Vulnerability Ratings
#
2.9
CVSSv31
7.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
libxml2
buildroot
2025.02.x
2.15.3
Not Affected
libxml2
buildroot
master
2.15.3
Not Affected
libxml2
openwrt
master
2.15.3-r1
Not Affected
libxml2
openwrt
openwrt-25.12
2.15.1-r1
Not Affected
libxml2
yocto
master
2.15.3
Not Affected
libxml2
yocto
scarthgap
2.12.10
Not Affected
Resolved with patches
#
libxml2 (yocto:kirkstone)
#
Title
Author
Resolve
1
pattern: Fix compilation of explicit child axis
Nick Wellnhofer <wellnhofer@aevum.de>
CVE-2025-27113