CVE Catalog

CVE-2024-55549

Medium
Published: Translated: NVD NIST

Summary

In libxslt before 1.1.43, xsltGetInheritedNsList has a use-after-free issue related to exclusion of result prefixes.

Risk Assessment

An attacker could exploit this to execute arbitrary code or crash applications processing XSLT transformations.

Recommendation

Update libxslt to version 1.1.43 or later.

Original NVD description (English source)

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS