Logo
vulnerabilityCVE-2025-6170
Name
CVE-2025-6170
Source
NVD ( link)Debian ( link)
Description
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
libxml2
Not Affected

Vulnerability Ratings#


2.5
CVSSv31
2.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
2.15.3
Not Affected
buildroot
master
2.15.3
Not Affected
openwrt
master
2.15.3-r1
Not Affected
openwrt
openwrt-25.12
2.15.1-r1
Not Affected
yocto
kirkstone
2.9.14
Patched
yocto
scarthgap
2.12.10
Patched

Resolved with patches#


libxml2 (yocto:kirkstone)

#
Title
Author
Resolve
1
[CVE-2025-6170] Fix potential buffer overflows of interactive
Michael Mann <mmann78@netscape.net>
CVE-2025-6170

libxml2 (yocto:scarthgap)

#
Title
Author
Resolve
1
[CVE-2025-6170] Fix potential buffer overflows of interactive
Michael Mann <mmann78@netscape.net>
CVE-2025-6170