FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

libxml2 -- Out-of-bounds memory access

Affected packages
		py310-libxml2	<	2.11.9_3
2.12.0	<=	py310-libxml2	<	2.13.8
2.14.0	<=	py310-libxml2	<	2.14.2
		py311-libxml2	<	2.11.9_3
2.12.0	<=	py311-libxml2	<	2.13.8
2.14.0	<=	py311-libxml2	<	2.14.2
		py312-libxml2	<	2.11.9_3
2.12.0	<=	py312-libxml2	<	2.13.8
2.14.0	<=	py312-libxml2	<	2.14.2
		py39-libxml2	<	2.11.9_3
2.12.0	<=	py39-libxml2	<	2.13.8
2.14.0	<=	py39-libxml2	<	2.14.2

Details

VuXML ID	2926c487-3e53-11f0-95d4-00a098b42aeb
Discovery	2025-04-08
Entry	2025-05-31

cve@mitre.org reports:

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

[source]

References

CVE Name	CVE-2025-32414
URL	https://nvd.nist.gov/vuln/detail/CVE-2025-32414