Uncontrolled Recursion Vulnerability in libxml2 Affecting SGML Catalogs
CVE-2025-8732
Key Information:
Badges
What is CVE-2025-8732?
A vulnerability exists in libxml2 affecting the xmlParseSGMLCatalog function within the xmlcatalog component, which can lead to uncontrolled recursion when processing untrusted SGML catalogs. While there are assertions about the unlikely usage of SGML catalogs, the potential for exploitation exists if such trusted data is mishandled. Local access is required to trigger this vulnerability, raising concerns about the safety and integrity of systems relying on libxml2. Users are advised to ensure they only work with trusted catalogs to mitigate any risks.
Affected Version(s)
libxml2 2.14.0
libxml2 2.14.1
libxml2 2.14.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.