# CVE-2025-6021

## Summary

- **CVE ID:** CVE-2025-6021
- **Severity:** HIGH
- **CVSS Score:** 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- **CWE:** CWE-190, CWE-787
- **Published:** Jun 12, 2025
- **Last Modified:** Sep 1, 2026

## Description

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

## Affected Products

- Unknown product (0)
- Red Hat — Red Hat Enterprise Linux 10 (0:2.12.5-7.el10_0)
- Red Hat — Red Hat Enterprise Linux 7 Extended Lifecycle Support (0:2.9.1-6.el7_9.10)
- Red Hat — Red Hat Enterprise Linux 8 (0:2.9.7-21.el8_10.1)
- Red Hat — Red Hat Enterprise Linux 8.2 Advanced Update Support (0:2.9.7-9.el8_2.3)
- Red Hat — Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (0:2.9.7-9.el8_4.6)
- Red Hat — Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On (0:2.9.7-9.el8_4.6)
- Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:2.9.7-13.el8_6.10)
- Red Hat — Red Hat Enterprise Linux 8.6 Telecommunications Update Service (0:2.9.7-13.el8_6.10)
- Red Hat — Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (0:2.9.7-13.el8_6.10)
- Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:2.9.7-16.el8_8.9)
- Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:2.9.7-16.el8_8.9)
- Red Hat — Red Hat Enterprise Linux 9 (0:2.9.13-10.el9_6)
- Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:2.9.13-1.el9_0.5)
- Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:2.9.13-3.el9_2.7)
- Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:2.9.13-10.el9_4)
- Red Hat — Red Hat OpenShift Container Platform 4.12 (412.86.202509030110-0)
- Red Hat — Red Hat OpenShift Container Platform 4.13 (413.92.202509030117-0)
- Red Hat — Red Hat OpenShift Container Platform 4.14 (414.92.202508041909-0)
- Red Hat — Red Hat OpenShift Container Platform 4.15 (415.92.202508192014-0)
- Red Hat — Red Hat OpenShift Container Platform 4.16 (416.94.202508050040-0)
- Red Hat — Red Hat OpenShift Container Platform 4.17 (417.94.202508141510-0)
- Red Hat — Red Hat OpenShift Container Platform 4.18 (418.94.202508060022-0)
- Red Hat — Red Hat OpenShift Container Platform 4.19 (4.19.9.6.202507230107-0)
- Red Hat — Red Hat Discovery 2 (sha256:c517869dacaf4d3650310d4a52e83706e0b311d6ebb4a9b37b1c7acff5c142ec)
- Red Hat — Red Hat Insights proxy 1.5 (sha256:e54a5a5f9d69dd6a03e2bcd845e2202910a188d266d4a79b12c387ceffc36f2d)
- Red Hat — Red Hat Discovery 2 (sha256:ad07f55ee75fb20310c88f154a04665bd8465d138d66c665c300f61447858344)
- Red Hat — Red Hat Insights proxy 1.5 (sha256:c26d589f12647890b67aaa986f54d3f7c6f7f2563fb5a73f38d559e6138739d7)
- Red Hat — Red Hat Hardened Images (2.15.2-0.3.hum1)
- Red Hat — Red Hat Discovery 2 (2.0.1-1754478727)
- Red Hat — Red Hat Insights proxy 1.5 (1.5.5-1754504343)

## References

- [CNA](https://access.redhat.com/errata/RHSA-2025:10630)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10698)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10699)
- [CNA](https://access.redhat.com/errata/RHSA-2025:11580)
- [CNA](https://access.redhat.com/errata/RHSA-2025:11673)
- [CNA](https://access.redhat.com/errata/RHSA-2025:12098)
- [CNA](https://access.redhat.com/errata/RHSA-2025:12099)
- [CNA](https://access.redhat.com/errata/RHSA-2025:12199)
- [CNA](https://access.redhat.com/errata/RHSA-2025:12237)
- [CNA](https://access.redhat.com/errata/RHSA-2025:12239)
- [CNA](https://access.redhat.com/errata/RHSA-2025:12240)
- [CNA](https://access.redhat.com/errata/RHSA-2025:12241)
- [CNA](https://access.redhat.com/errata/RHSA-2025:13267)
- [CNA](https://access.redhat.com/errata/RHSA-2025:13289)
- [CNA](https://access.redhat.com/errata/RHSA-2025:13325)
- [CNA](https://access.redhat.com/errata/RHSA-2025:13335)
- [CNA](https://access.redhat.com/errata/RHSA-2025:13336)
- [CNA](https://access.redhat.com/errata/RHSA-2025:14059)
- [CNA](https://access.redhat.com/errata/RHSA-2025:14396)
- [CNA](https://access.redhat.com/errata/RHSA-2025:15308)
- [CNA](https://access.redhat.com/errata/RHSA-2025:15672)
- [CNA](https://access.redhat.com/errata/RHSA-2025:19020)
- [CNA](https://access.redhat.com/security/cve/CVE-2025-6021)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2372406)
- [CISA-ADP](https://gitlab.gnome.org/GNOME/libxml2/-/issues/926)
- [CVE](https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html)
- [CNA](https://access.redhat.com/errata/RHSA-2026:7519)
- [siemens-SADP](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 1.37%
- **EPSS Percentile:** 70.5

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._