CVE-2025-24928

Summary

CVE-2025-24928 is a newly identified buffer overflow vulnerability affecting libxml2 before version 2.12.10 and 2.13.x before 2.13.6. This issue lies in the xmlSnprintfElements function within the valid.c file, leading to a stack-based buffer overflow. For exploitation, an untrusted document or DTD must undergo DTD validation. This vulnerability shares similarities with CVE-2017-9047.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.