CVE-2025-6170
LowCVSS 2.5Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A flaw in the interactive shell of the xmllint XML parsing tool causes overly long commands to not be properly size-checked, potentially leading to a crash. In rare configurations without modern protections, arbitrary code execution may be possible.
Risk Assessment
An attacker can crash the tool or potentially execute malicious code, threatening system stability and security.
Recommendation
Update to a patched version of libxml2 or restrict the length of input commands.
Original NVD description (English source)
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.