Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/libxml2@2.14.4-1
purl pkg:alpm/archlinux/libxml2@2.14.4-1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.1
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-464a-typa-7qbu
Aliases:
CVE-2025-6170
libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling There are no reported fixed by versions.
VCID-74y5-vcxn-2ygr
Aliases:
CVE-2025-49794
libxml: Heap use after free (UAF) leads to Denial of service (DoS) There are no reported fixed by versions.
VCID-bz1e-1ypb-kkgg
Aliases:
CVE-2025-49796
libxml: Type confusion leads to Denial of service (DoS) There are no reported fixed by versions.
VCID-eqva-5dwq-d7cw
Aliases:
CVE-2025-49795
libxml: Null pointer dereference leads to Denial of service (DoS) There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-27jd-t23h-73f4 libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 CVE-2025-6021

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:25:01.566625+00:00 Arch Linux Importer Fixing VCID-27jd-t23h-73f4 https://security.archlinux.org/AVG-2899 38.0.0
2026-04-01T18:24:02.501223+00:00 Arch Linux Importer Affected by VCID-74y5-vcxn-2ygr https://security.archlinux.org/AVG-2898 38.0.0
2026-04-01T18:24:02.483035+00:00 Arch Linux Importer Affected by VCID-eqva-5dwq-d7cw https://security.archlinux.org/AVG-2898 38.0.0
2026-04-01T18:24:02.463886+00:00 Arch Linux Importer Affected by VCID-bz1e-1ypb-kkgg https://security.archlinux.org/AVG-2898 38.0.0
2026-04-01T18:24:02.444633+00:00 Arch Linux Importer Affected by VCID-464a-typa-7qbu https://security.archlinux.org/AVG-2898 38.0.0