Wind River Support Network

HomeDefectsLIN1021-14592

Fixed

LIN1021-14592 : Security Advisory - libxslt - CVE-2025-24855

Created: Mar 13, 2025 Updated: May 21, 2025

Resolved Date: May 21, 2025

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

CREATE(Triage):(User=admin) CVE-2025-24855 (https://nvd.nist.gov/vuln/detail/CVE-2025-24855)

CVEs

CVE-2025-24855