HCE1-SA-2025-0057

Details

Security Fix(es):

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used. (CVE-2025-32415)

Affected Packages

libxml2

HCE 1.1

Fixed in:

2.9.1-6.hce1c.12

libxml2-devel

HCE 1.1

Fixed in:

2.9.1-6.hce1c.12

libxml2-python

HCE 1.1

Fixed in:

2.9.1-6.hce1c.12

References

ADVISORY

https://mirrors.huaweicloud.com/hce/1.1/sa/HCE1-SA-2025-0057.xml