CYBERSIXT Signal Over Noise
All CVEs
Vulnerability intelligence

CVE-2025-6021

CWE-787

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

CVSS Score
7.5
High
EPSS — Exploit Probability
1.1%
Riskier than 61% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
Patch available
Vendor fix published
NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered May 14, 2026 · latest May 14, 2026

Coverage timeline