CVE-2022-49043

20

FAUCET Score

CVE-2022-49043 is a use-after-free vulnerability in the xmlXIncludeAddNode function of libxml2 versions prior to 2.11.0. This flaw carries a high CVSS score of 7.8, indicating a significant risk with potential for high impact on confidentiality, integrity, and availability, though it requires local access and low privileges. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting a low immediate threat.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 2.11.0CPE matchmatch criteria	cpe:2.3:a:xmlsoft:libxml2::::::::
		>= 2.0.0, < 2.11.0CPE match	cpe:2.3:a:xmlsoft:libxml2::::::::

CVSS Data

CVSS version used by this source: 3.1

8.1HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.4

Impact Score

6.0

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.26%

Probability of exploitation in next 30 days

EPSS Percentile

17.3%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0026 is in the 52nd percentile among its peer group of 17,070 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (30)

codesyspatch availablevia llm_extracted

esphomepatch availablevia llm_extracted

microsoftpatch availablevia msrc

Product: cbl2 libxml2 2.10.4-6 on CBL Mariner 2.0Fixed in: 2.10.4-5

microsoftpatch availablevia msrc

Product: cbl2 libxml2 2.10.4-5 on CBL Mariner 2.0Fixed in: 2.10.4-5

microsoftpatch availablevia msrc

Product: 19520-16823Fixed in: 2.10.4-5

microsoftpatch availablevia msrc

Product: 20051-17086Fixed in: 2.10.4-5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: libxml2-0:2.9.13-3.el9_2.4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: libxml2-0:2.9.13-9.el9_4

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.12Fixed in: rhcos-412.86.202504240545-0

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.13Fixed in: rhcos-413.92.202505061702-0

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.14Fixed in: rhcos-414.92.202505141057-0

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.15Fixed in: rhcos-415.92.202504282058-0

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.17Fixed in: rhcos-417.94.202504080421-0

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.18Fixed in: rhcos-418.94.202504080525-0

redhatpatch availablevia redhat_api

Product: Service Interconnect 1 for RHEL 9Fixed in: service-interconnect/skupper-config-sync-rhel9:1.5.5-5

redhatpatch availablevia redhat_api

Product: Service Interconnect 1 for RHEL 9Fixed in: service-interconnect/skupper-controller-podman-rhel9:1.5.5-5

redhatpatch availablevia redhat_api

Product: Service Interconnect 1 for RHEL 9Fixed in: service-interconnect/skupper-flow-collector-rhel9:1.5.5-5

redhatpatch availablevia redhat_api

Product: Service Interconnect 1 for RHEL 9Fixed in: service-interconnect/skupper-operator-bundle:1.5.5-5

redhatpatch availablevia redhat_api

Product: Service Interconnect 1 for RHEL 9Fixed in: service-interconnect/skupper-router-rhel9:2.5.3-7

redhatpatch availablevia redhat_api

Product: Service Interconnect 1 for RHEL 9Fixed in: service-interconnect/skupper-service-controller-rhel9:1.5.5-5

redhatpatch availablevia redhat_api

Product: Service Interconnect 1 for RHEL 9Fixed in: service-interconnect/skupper-site-controller-rhel9:1.5.5-5

redhatpatch availablevia redhat_api

Product: Service Interconnect 1 for RHEL 9Fixed in: service-interconnect/skupper-controller-podman-container-rhel9:1.5.5-5

redhatpatch availablevia redhat_api

Product: Discovery 1 for RHEL 9Fixed in: discovery/discovery-server-rhel9:1.12.1-2

redhatpatch availablevia redhat_api

Product: Discovery 1 for RHEL 9Fixed in: discovery/discovery-ui-rhel9:1.12.0-2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: libxml2-0:2.9.7-18.el8_10.2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: libxml2-0:2.9.7-16.el8_8.7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: libxml2-0:2.9.13-6.el9_5.1

redhatno patchvia redhat_api

Product: Red Hat JBoss Core ServicesFixed in: libxml2

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: libxml2

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: libxml2

Vendor Advisories (4)

codesysllm-codesys-fe85e88fbae25bb9CRITICAL

HP ThinPro 8.1 SP7 Security Updates

esphomellm-esphome-ed450ce9fd6a7380CRITICAL

HP ThinPro 8.1 SP7 Security Updates

redhatCVE-2022-49043Moderate

libxml: use-after-free in xmlXIncludeAddNode

microsoft2025-Jan/CVE-2022-49043Critical

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

References

lists.debian.org / debian-lts-announce/2025/02/msg00028.html

github.com / php/php-src/issues/17467

Issue Tracking

gitlab.gnome.org / GNOME/libxml2/-/commit/5a19e21605398cef6a8b1452477a8705cb41562b

Patch