Affected: Alpaquita:23: libxslt, Alpaquita:25: libxslt, Alpaquita:stream: libxslt, BellSoft Hardened Containers:23: libxslt, BellSoft Hardened Containers:25: libxslt, BellSoft Hardened Containers:stream: libxslt
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
Affected: openEuler:20.03-LTS-SP4: libxslt
Libxslt is the XSLT C library developed for the GNOME project Security Fix(es):
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.(CVE-2025-11731)
libexslt0-1.1.43-4.1 on GA media
libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes libxslt: use-after-free with key data stored cross-RVT libxslt: Type Confusion in exsltFuncResultCompfunction of libxslt
Security update for libxslt
Affected: Ubuntu:Pro:14.04:LTS: libxslt, Ubuntu:Pro:16.04:LTS: libxslt, Ubuntu:Pro:18.04:LTS: libxslt, Ubuntu:Pro:20.04:LTS: libxslt, Ubuntu:22.04:LTS: libxslt, Ubuntu:24.04:LTS: libxslt, Ubuntu:25.10: libxslt, Ubuntu:26.04:LTS: libxslt
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
Ein Angreifer kann mehrere Schwachstellen in Dell Avamar und Dell NetWorker ausnutzen, um Angriffe zu starten, die die Integrität, Vertraulichkeit und Verfügbarkeit von Systemen beeinträchtigen.