CVE-2025-27113

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

In libxml2 before 2.12.10 and 2.13.6, a NULL pointer dereference exists in xmlPatMatch in pattern.c.

An attacker could crash the XML processing application, leading to denial of service (DoS).

Update libxml2 to version 2.12.10, 2.13.6, or later.

Original NVD description (English source)

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.