CVE Catalog
CVE-2025-10729
CriticalCVSS 9.4Exploitation Probability (EPSS)
Low risk0.20%
11th percentile - higher than 11% of all known CVEs
Summary
The module parses a <pattern> node that is not a child of a structural node. The node is deleted after creation but may be accessed later, leading to a use-after-free.
Risk Assessment
An attacker could exploit this for remote code execution or application crash.
Recommendation
Update to a version that fixes the use-after-free issue.
Original NVD description (English source)
The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.