{"id":"CVE-2025-25341","title":"A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document","summary":"A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"vendor":"libxmljs_project","product":"libxmljs","affected":["libxmljs = 1.0.11"],"published":"2025-12-26","updated":"2026-10-13","sourceUpdated":"2026-10-13T10:10:00.193","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-25341","references":[{"url":"https://github.com/libxmljs/libxmljs/issues/667","label":"cve@mitre.org"}],"tags":["nvd"],"epss":0.00422,"epssPercentile":0.34658,"ingestedAt":"2026-10-13T10:22:03.525Z","slug":"CVE-2025-25341","body":"## Overview\n\nA vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).\n\n## Affected\n\n- `libxmljs = 1.0.11`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}