cve-2025-49796.sct

Branch

Show log
Commit

Hash : 71e1e8af
Author :
Date : 2025-07-04T14:28:26

schematron: Fix memory safety issues in xmlSchematronReportOutput

Fix use-after-free (CVE-2025-49794) and type confusion (CVE-2025-49796)
in xmlSchematronReportOutput.

Fixes #931.
Fixes #933.

Download

test/schematron/cve-2025-49796.sct

<sch:schema xmlns:sch="http://purl.oclc.org/dsdl/schematron">
    <sch:pattern id="">
        <sch:rule context="boo0">
            <sch:report test="not(0)">
                <sch:name path="/"/>
            </sch:report>
        </sch:rule>
    </sch:pattern>
</sch:schema>

Download

kc3-lang/libxml2/test/schematron/cve-2025-49796.sct

Commit

test/schematron/cve-2025-49796.sct