CVE-2025-12748
published 2025-11-11CVE-2025-12748: A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A…
PriorityP424medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.8th percentile
A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libvirt | < libvirt 11.10.0-1 (forky) | libvirt 11.10.0-1 (forky) |
| msrc | azl3_libvirt_10.0.0-5_on_azure_linux_3.0 | — | — |
| msrc | azl3_libvirt_10.0.0-6_on_azure_linux_3.0 | — | — |
| msrc | azl3_libvirt_10.0.0-7_on_azure_linux_3.0 | — | — |
| msrc | cbl2_libvirt_7.10.0-10_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_libvirt_7.10.0-11_on_cbl_mariner_2.0 | — | — |
| redhat | libvirt | >= 0 < 11.3.0-3+deb13u2 | 11.3.0-3+deb13u2 |
| redhat | libvirt | >= 0 < 11.10.0-1 | 11.10.0-1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
libvirt XML File allocation of resources (Nessus ID 274838 / WID-SEC-2026-1598)
vuldb·2026-07-22·CVSS 5.5
CVE-2025-12748 [MEDIUM] libvirt XML File allocation of resources (Nessus ID 274838 / WID-SEC-2026-1598)
A vulnerability, which was classified as critical, was found in libvirt. This affects an unknown function of the component XML File Handler. Such manipulation leads to allocation of resources.
This vulnerability is traded as CVE-2025-12748. An attack has to be approached locally. There is no exploit available.
GHSA
GHSA-qwrw-p888-cc55: A flaw was discovered in libvirt in the XML file processing
ghsa_unreviewed·2025-11-11
CVE-2025-12748 [MEDIUM] CWE-770 GHSA-qwrw-p888-cc55: A flaw was discovered in libvirt in the XML file processing
A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.
OSV
CVE-2025-12748: A flaw was discovered in libvirt in the XML file processing
osv·2025-11-11·CVSS 5.5
CVE-2025-12748 [MEDIUM] CVE-2025-12748: A flaw was discovered in libvirt in the XML file processing
A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.
Ubuntu
libvirt vulnerabilities
vendor_ubuntu·2026-01-08·CVSS 5.5
CVE-2025-13193 [MEDIUM] libvirt vulnerabilities
Title: libvirt vulnerabilities
Summary: Several security issues were fixed in libvirt.
It was discovered that libvirt parsed user-provided XML files before
performing ACL checks. An attacker could possibly use this issue to cause
libvirt to consume memory, resulting in a denial of service.
(CVE-2025-12748)
It was discovered that libvirt incorrectly handled permissions on external
inactive snapshots. A local attacker could possibly use this issue to
obtain sensitive guest contents. (CVE-2025-13193)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Microsoft
Libvirt: denial of service in xml parsing
vendor_msrc·2025-11-11·CVSS 5.5
CVE-2025-12748 [MEDIUM] CWE-770 Libvirt: denial of service in xml parsing
Libvirt: denial of service in xml parsing
Mariner: Mariner
redhat: redhat
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
Red Hat
libvirt: Denial of service in XML parsing
vendor_redhat·2025-11-07·CVSS 5.5
CVE-2025-12748 [MEDIUM] CWE-770 libvirt: Denial of service in XML parsing
libvirt: Denial of service in XML parsing
A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.
A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much me
Debian
CVE-2025-12748: libvirt - A flaw was discovered in libvirt in the XML file processing. More specifically, ...
vendor_debian·2025·CVSS 5.5
CVE-2025-12748 [MEDIUM] CVE-2025-12748: libvirt - A flaw was discovered in libvirt in the XML file processing. More specifically, ...
A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 11.10.0-1)
sid: resolved (fixed in 11.10.0-1)
trixie: resolved (fixed in 11.3.0-3+deb13u2)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-12748 libvirt: Denial of service in XML parsing
bugzilla·2025-11-10·CVSS 5.5
CVE-2025-12748 [MEDIUM] CVE-2025-12748 libvirt: Denial of service in XML parsing
CVE-2025-12748 libvirt: Denial of service in XML parsing
A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks (https://libvirt.org/acl.html). A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.
Upstream issue:
https://gitlab.com/libvirt/libvirt/-/issues/825
Patch:
https://lists.libvirt.org/archives/list/[email protected]/thread/LTGHU3S4JEMCF5KJNJGWWZ7F2CS6L5SG/
Discussion:
This issue has been addressed in the following products:
Red Hat En
Bugzilla
CVE-2025-8058 glibc: Double free in glibc
bugzilla·2025-07-23·CVSS 5.9
CVE-2025-8058 [MEDIUM] CVE-2025-8058 glibc: Double free in glibc
CVE-2025-8058 glibc: Double free in glibc
The regcomp function in the GNU C library version from 2.4 to 2.41 is
subject to a double free if some previous allocation fails. It can be
accomplished either by a malloc failure or by using an interposed malloc
that injects random malloc failures. The double free can allow buffer
manipulation depending of how the regex is constructed. This issue
affects all architectures and ABIs supported by the GNU C library.
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:12748 https://access.redhat.com/errata/RHSA-2025:12748
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2025:12980 https://access.redhat.com/errata/RHSA-2025:12980
---
This
2025-11-11
Published