CVE Catalog
CVE-2025-32414
MediumSummary
In libxml2 before 2.13.8 and 2.14.2, out-of-bounds memory access occurs in the Python API due to an incorrect return value in xmlPythonFileRead and xmlPythonFileReadRaw.
Risk Assessment
An attacker could read sensitive information or crash applications using the libxml2 Python API.
Recommendation
Update libxml2 to version 2.13.8, 2.14.2, or later.
Original NVD description (English source)
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.