CVE-2025-27113

Name of the Vulnerable Software and Affected Versions libxml2 versions 2.12.10 and earlier, 2.13.x versions prior to 2.13.6

Description The issue is related to a NULL pointer dereference in xmlPatMatch in pattern.c. This is a general information about the problem, and no specific details about affected devices or real-world incidents are provided.

Recommendations For libxml2 versions 2.12.10 and earlier, update to version 2.12.10 or later. For libxml2 version 2.13.x prior to 2.13.6, update to version 2.13.6 or later. As a temporary workaround, consider disabling the xmlPatMatch function in pattern.c until a patch is available.