libxml2 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the libxml2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M NULL Pointer Dereference	<2.9.4+dfsg1-6.1ubuntu1.9+esm9
M Heap-based Buffer Overflow	<2.9.4+dfsg1-6.1ubuntu1.9+esm9
M Integer Coercion Error	<2.9.4+dfsg1-6.1ubuntu1.9+esm9
M Incorrect Resource Transfer Between Spheres	<2.9.4+dfsg1-6.1ubuntu1.9+esm9
M Integer Overflow or Wraparound	<2.9.4+dfsg1-6.1ubuntu1.9+esm9
M Release of Invalid Pointer or Reference	<2.9.4+dfsg1-6.1ubuntu1.9+esm8
M Stack-based Buffer Overflow	<2.9.4+dfsg1-6.1ubuntu1.9+esm8
L Improper Resource Shutdown or Release	<2.9.4+dfsg1-6.1ubuntu1.9+esm7
M Uncontrolled Recursion	<2.9.4+dfsg1-6.1ubuntu1.9+esm7
M Uncontrolled Recursion	<2.9.4+dfsg1-6.1ubuntu1.9+esm7
M Resource Exhaustion	<2.9.4+dfsg1-6.1ubuntu1.9+esm7
M Use After Free	<2.9.4+dfsg1-6.1ubuntu1.9+esm6
M CVE-2025-9714	<2.9.4+dfsg1-6.1ubuntu1.9+esm5
M Out-of-bounds Write	<2.9.4+dfsg1-6.1ubuntu1.9+esm4
M Out-of-bounds Read	<2.9.4+dfsg1-6.1ubuntu1.9+esm4
M Expired Pointer Dereference	<2.9.4+dfsg1-6.1ubuntu1.9+esm4
M Stack-based Buffer Overflow	<2.9.4+dfsg1-6.1ubuntu1.9+esm4
M Unchecked Return Value	<2.9.4+dfsg1-6.1ubuntu1.9+esm3
M Out-of-bounds Read	<2.9.4+dfsg1-6.1ubuntu1.9+esm3
M CVE-2022-49043	<2.9.4+dfsg1-6.1ubuntu1.9+esm2
L CVE-2024-34459	<2.9.4+dfsg1-6.1ubuntu1.9+esm2
M CVE-2024-56171	<2.9.4+dfsg1-6.1ubuntu1.9+esm2
M NULL Pointer Dereference	<2.9.4+dfsg1-6.1ubuntu1.9+esm2
M CVE-2025-24928	<2.9.4+dfsg1-6.1ubuntu1.9+esm2
M Use After Free	<2.9.4+dfsg1-6.1ubuntu1.9+esm1
M Double Free	<2.9.4+dfsg1-6.1ubuntu1.9
M NULL Pointer Dereference	<2.9.4+dfsg1-6.1ubuntu1.9
M Double Free	<2.9.4+dfsg1-6.1ubuntu1.8
M Integer Overflow or Wraparound	<2.9.4+dfsg1-6.1ubuntu1.8
M Cross-site Scripting (XSS)	<2.9.4+dfsg1-6.1ubuntu1.7
M Integer Overflow or Wraparound	<2.9.4+dfsg1-6.1ubuntu1.6
M Use After Free	<2.9.4+dfsg1-6.1ubuntu1.5
M Out-of-bounds Write	<2.9.4+dfsg1-6.1ubuntu1.4
M Use After Free	<2.9.4+dfsg1-6.1ubuntu1.4
M Use After Free	<2.9.4+dfsg1-6.1ubuntu1.4
M NULL Pointer Dereference	<2.9.4+dfsg1-6.1ubuntu1.4
L Out-of-bounds Read	<2.9.4+dfsg1-6.1ubuntu1.4
L Loop with Unreachable Exit Condition ('Infinite Loop')	<2.9.4+dfsg1-6.1ubuntu1.3
L Memory Leak	<2.9.4+dfsg1-6.1ubuntu1.4
L Missing Release of Resource after Effective Lifetime	<2.9.4+dfsg1-6.1ubuntu1.3
M Loop with Unreachable Exit Condition ('Infinite Loop')	<2.9.4+dfsg1-6.1ubuntu1.2
M NULL Pointer Dereference	<2.9.4+dfsg1-6.1ubuntu1.2
M Use After Free	<2.9.4+dfsg1-6.1ubuntu1
L Allocation of Resources Without Limits or Throttling	<2.9.4+dfsg1-6.1ubuntu1.2
L Out-of-bounds Write	<2.9.4+dfsg1-6.1ubuntu1
L Loop with Unreachable Exit Condition ('Infinite Loop')	<2.9.4+dfsg1-6.1ubuntu1.2
L Out-of-bounds Read	<2.9.4+dfsg1-6.1ubuntu1
L XML External Entity (XXE) Injection	<2.9.4+dfsg1-6.1ubuntu1.2

Vulnerability

Vulnerable Version

NULL Pointer Dereference

<2.9.4+dfsg1-6.1ubuntu1.9+esm9