CVE-2025-6021
HIGHDescription
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
Is your site exposed to CVE-2025-6021?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Type (CWE)
CWE-787
Out-of-bounds Write
Affected Products
| Vendor | Product |
|---|---|
| xmlsoft | libxml2 |
| redhat | jboss_core_services |
| redhat | openshift_container_platform |
| redhat | openshift_container_platform |
| redhat | openshift_container_platform |
| redhat | openshift_container_platform |
| redhat | openshift_container_platform |
| redhat | openshift_container_platform |
| redhat | openshift_container_platform |
| redhat | openshift_container_platform_for_arm64 |
| redhat | openshift_container_platform_for_arm64 |
| redhat | openshift_container_platform_for_arm64 |
| redhat | openshift_container_platform_for_arm64 |
| redhat | openshift_container_platform_for_arm64 |
| redhat | openshift_container_platform_for_arm64 |
| redhat | openshift_container_platform_for_ibm_z |
| redhat | openshift_container_platform_for_ibm_z |
| redhat | openshift_container_platform_for_ibm_z |
| redhat | openshift_container_platform_for_ibm_z |
| redhat | openshift_container_platform_for_ibm_z |
| redhat | openshift_container_platform_for_ibm_z |
| redhat | openshift_container_platform_for_linuxone |
| redhat | openshift_container_platform_for_linuxone |
| redhat | openshift_container_platform_for_linuxone |
| redhat | openshift_container_platform_for_linuxone |
| redhat | openshift_container_platform_for_linuxone |
| redhat | openshift_container_platform_for_linuxone |
| redhat | openshift_container_platform_for_power |
| redhat | openshift_container_platform_for_power |
| redhat | openshift_container_platform_for_power |
| redhat | openshift_container_platform_for_power |
| redhat | openshift_container_platform_for_power |
| redhat | openshift_container_platform_for_power |
| redhat | enterprise_linux |
| redhat | enterprise_linux |
| redhat | enterprise_linux |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_for_arm_64 |
| redhat | enterprise_linux_for_arm_64 |
| redhat | enterprise_linux_for_arm_64 |
| redhat | enterprise_linux_for_arm_64 |
| redhat | enterprise_linux_for_arm_64_eus |
| redhat | enterprise_linux_for_arm_64_eus |
| redhat | enterprise_linux_for_arm_64_eus |
| redhat | enterprise_linux_for_ibm_z_systems |
| redhat | enterprise_linux_for_ibm_z_systems |
| redhat | enterprise_linux_for_ibm_z_systems |
| redhat | enterprise_linux_for_ibm_z_systems_eus |
| redhat | enterprise_linux_for_ibm_z_systems_eus |
| redhat | enterprise_linux_for_ibm_z_systems_eus |
| redhat | enterprise_linux_for_ibm_z_systems_eus |
| redhat | enterprise_linux_for_power_little_endian |
| redhat | enterprise_linux_for_power_little_endian |
| redhat | enterprise_linux_for_power_little_endian |
| redhat | enterprise_linux_for_power_little_endian_eus |
| redhat | enterprise_linux_for_power_little_endian_eus |
| redhat | enterprise_linux_for_power_little_endian_eus |
| redhat | enterprise_linux_server |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions |
| redhat | enterprise_linux_server_tus |
| redhat | in-vehicle_operating_system |
References
Advisories & Patches
Exploits
Other References
https://access.redhat.com/errata/RHSA-2025:10630
https://access.redhat.com/errata/RHSA-2025:10698
https://access.redhat.com/errata/RHSA-2025:10699
https://access.redhat.com/errata/RHSA-2025:11580
https://access.redhat.com/errata/RHSA-2025:11673
https://access.redhat.com/errata/RHSA-2025:12098
https://access.redhat.com/errata/RHSA-2025:12099
https://access.redhat.com/errata/RHSA-2025:12199
https://access.redhat.com/errata/RHSA-2025:12237
https://access.redhat.com/errata/RHSA-2025:12239
Frequently Asked Questions
What is CVE-2025-6021? +
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input. It has a CVSS v3.1 base score of 7.5 (HIGH).
How severe is CVE-2025-6021? +
CVE-2025-6021 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2025-6021? +
CVE-2025-6021 affects products from redhat, xmlsoft, specifically: enterprise_linux, enterprise_linux_eus, enterprise_linux_for_arm_64, enterprise_linux_for_arm_64_eus, enterprise_linux_for_ibm_z_systems, enterprise_linux_for_ibm_z_systems_eus, enterprise_linux_for_power_little_endian, enterprise_linux_for_power_little_endian_eus, enterprise_linux_server, enterprise_linux_server_aus, enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions, enterprise_linux_server_tus, in-vehicle_operating_system, jboss_core_services, libxml2, openshift_container_platform, openshift_container_platform_for_arm64, openshift_container_platform_for_ibm_z, openshift_container_platform_for_linuxone, openshift_container_platform_for_power. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2025-6021? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.
Related Vulnerabilities
CVE-2026-8358
LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the …
CVE-2026-8356
LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. …
CVE-2026-6040
A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the …
CVE-2026-6039
LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a …
CVE-2026-3298
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. …
CVE-2026-40489
editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have …