CVE-2025-6170
LowCVSS 2.5Exploitation Probability (EPSS)
Low risk9th percentile — higher than 9% of all known CVEs
Summary
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
Risk Assessment
The risk for the organization is a potential crash of the xmllint tool when processing long commands, which under specific conditions could lead to unauthorized code execution and compromise system security.
Recommendation
It is recommended to update the libxml2 library to the latest patched version and avoid using the xmllint interactive shell with untrusted input.
Original NVD description (English source)
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.