---
id: CVE-2025-25341
title: >-
  A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted
  XML document
summary: >-
  A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted
  XML document. Accessing the internal _ref property on entity_ref and
  entity_decl nodes causes a segmentation fault, potentially leading to a
  denial-of-service…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-400
vendor: libxmljs_project
product: libxmljs
affected:
  - libxmljs = 1.0.11
published: '2025-12-26'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T10:10:00.193'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-25341'
references:
  - url: 'https://github.com/libxmljs/libxmljs/issues/667'
    label: cve@mitre.org
tags:
  - nvd
epss: 0.00422
epssPercentile: 0.34658
ingestedAt: '2026-10-13T10:22:03.525Z'
---

## Overview

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).

## Affected

- `libxmljs = 1.0.11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.