CVE-2025-24928

CVE-2025-24928 is a stack-based buffer overflow vulnerability in libxml2 versions before 2.12.10 and 2.13.x before 2.13.6, specifically within the xmlSnprintfElements function in valid.c. This flaw affects products utilizing libxml2, such as NetApp and xmlsoft, and can be triggered during DTD validation of untrusted documents or DTDs. The vulnerability carries a high CVSS score of 7.7, indicating a significant impact, particularly on confidentiality and integrity, though it does not affect availability. Exploitation requires local access and low attack complexity, but no user interaction is needed. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or immediate concern.