CVE-2025-9714

Name of the Vulnerable Software and Affected Versions: libxml2 versions prior to 2.9.15

Description: An uncontrolled recursion issue in XPath evaluation within libxml2 allows a local attacker to cause a stack overflow through crafted expressions. The XPath processing functions xmlXPathRunEval, xmlXPathCtxtCompile, and xmlXPathEvalExpr previously reset recursion depth to zero before making potentially recursive calls, enabling uncontrolled recursion and a potential stack overflow when called recursively. These functions now preserve recursion depth across recursive calls, allowing for controlled recursion.

Recommendations: Update to libxml2 version 2.9.15 or later.