{"schema":"vulnpedia.research/1","cve":"CVE-2025-59375","references":[{"url":"https://github.com/libexpat/libexpat/issues/1018","tags":["Exploit","Issue Tracking"],"source":"mitre","sourceId":"mitre","modified":"2025-09-17T13:21:47.961Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2025-09-17T13:21:47.961Z","url":"https://github.com/libexpat/libexpat/issues/1018"},{"source":"nvd","sourceId":"CVE-2025-59375","modified":"2026-10-19T17:10:00.173","url":"https://github.com/libexpat/libexpat/issues/1018"}]},{"url":"https://github.com/libexpat/libexpat/pull/1034","tags":["Issue Tracking"],"source":"mitre","sourceId":"mitre","modified":"2025-09-17T13:21:47.961Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2025-09-17T13:21:47.961Z","url":"https://github.com/libexpat/libexpat/pull/1034"},{"source":"nvd","sourceId":"CVE-2025-59375","modified":"2026-10-19T17:10:00.173","url":"https://github.com/libexpat/libexpat/pull/1034"}]},{"url":"https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/expat/Changes#L45-L74","tags":["Product"],"source":"mitre","sourceId":"mitre","modified":"2025-09-17T13:21:47.961Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2025-09-17T13:21:47.961Z","url":"https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/expat/Changes#L45-L74"},{"source":"nvd","sourceId":"CVE-2025-59375","modified":"2026-10-19T17:10:00.173","url":"https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/expat/Changes#L45-L74"}]},{"url":"https://issues.oss-fuzz.com/issues/439133977","tags":["Exploit","Issue Tracking"],"source":"mitre","sourceId":"mitre","modified":"2025-09-17T13:21:47.961Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2025-09-17T13:21:47.961Z","url":"https://issues.oss-fuzz.com/issues/439133977"},{"source":"nvd","sourceId":"CVE-2025-59375","modified":"2026-10-19T17:10:00.173","url":"https://issues.oss-fuzz.com/issues/439133977"}]},{"url":"https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes","tags":["Product"],"source":"mitre","sourceId":"mitre","modified":"2025-09-17T13:21:47.961Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2025-09-17T13:21:47.961Z","url":"https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes"},{"source":"nvd","sourceId":"CVE-2025-59375","modified":"2026-10-19T17:10:00.173","url":"https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes"}]},{"url":"http://www.openwall.com/lists/oss-security/2025/09/16/2","tags":[],"source":"mitre","sourceId":"CVE","modified":"2026-05-01T14:25:12.055Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-05-01T14:25:12.055Z","url":"http://www.openwall.com/lists/oss-security/2025/09/16/2"},{"source":"nvd","sourceId":"CVE-2025-59375","modified":"2026-10-19T17:10:00.173","url":"http://www.openwall.com/lists/oss-security/2025/09/16/2"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/05/01/5","tags":[],"source":"mitre","sourceId":"CVE","modified":"2026-05-01T14:25:12.055Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-05-01T14:25:12.055Z","url":"http://www.openwall.com/lists/oss-security/2026/05/01/5"},{"source":"nvd","sourceId":"CVE-2025-59375","modified":"2026-10-19T17:10:00.173","url":"http://www.openwall.com/lists/oss-security/2026/05/01/5"}]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","tags":[],"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T01:09:25.199Z","origins":[{"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T01:09:25.199Z","url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"},{"source":"nvd","sourceId":"CVE-2025-59375","modified":"2026-10-19T17:10:00.173","url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html","tags":[],"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T01:09:25.199Z","origins":[{"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-15T01:09:25.199Z","url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html"},{"source":"nvd","sourceId":"CVE-2025-59375","modified":"2026-10-19T17:10:00.173","url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2025-59375","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/security/cve/CVE-2025-59375"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2395108","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2395108"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-59375","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2025-59375"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59375","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59375"}]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2025-59375","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://www.mozilla.org/security/advisories/mfsa2026-22/#CVE-2025-59375"}]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2025-59375","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://www.mozilla.org/security/advisories/mfsa2026-24/#CVE-2025-59375"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0316","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0316"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0332","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0332"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:10950","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:10950"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0001","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0001"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:19177","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:19177"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:21776","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:21776"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22034","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22034"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:19064","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:19064"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23227","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23227"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:58981"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0934","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0934"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0677","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0677"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0996","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0996"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:1541","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:1541"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0326","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0326"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0702","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0702"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0674","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0674"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0420","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0420"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:19403","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:19403"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:21030","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:21030"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0078","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0078"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0077","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0077"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0076","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0076"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:21773","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:21773"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22175","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22175"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22871","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22871"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22785","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22785"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22842","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22842"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22607","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22607"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22035","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22035"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22033","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22033"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:21974","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:21974"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:3407","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:3407"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23080","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23080"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23202","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23202"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23204","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23204"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23078","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23078"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:3461","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:3461"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:3462","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:3462"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23079","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23079"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23449","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23449"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23205","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23205"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23209","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23209"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23248","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23248"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:23550","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:23550"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:1652","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:1652"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0414","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0414"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:5396","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:5396"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:19020","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:19020"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22618","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22618"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:0518","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:0518"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:22935","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2025:22935"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:21275","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://access.redhat.com/errata/RHSA-2026:21275"}]},{"source":"euvd","sourceId":"EUVD-2025-29148","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-29148","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2025-29148","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-29148"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"8Base-RHOSE-4.12:rhcos-x86_64-412.86.202601061735-0","product":"rhcos-x86_64-412.86.202601061735-0 as a component of Red Hat OpenShift Container Platform 4.12","status":"fixed","remediations":[{"category":"vendor_fix","details":"For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes\n\nYou may download the oc tool and use it to inspect release image metadata for the x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\n      The sha value for the release is as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:9ea794d2dd24ff7377534edfb0447e5398a28919a84300cc79fe7bb8ae550d1b\n\nAll OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.","url":"https://access.redhat.com/errata/RHSA-2026:0316"},{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."}],"purl":"pkg:generic/redhat/rhcos@412.86.202601061735?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"9Base-RHOSE-4.18:rhcos-x86_64-418.94.202601071817-0","product":"rhcos-x86_64-418.94.202601071817-0 as a component of Red Hat OpenShift Container Platform 4.18","status":"fixed","remediations":[{"category":"vendor_fix","details":"For OpenShift Container Platform 4.18 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata\nfor x86_64, s390x, ppc64le, and aarch64 architectures. The image digests\nmay be found at\nhttps://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n      (For x86_64 architecture)\n      The image digest is sha256:64e8c4cbd3199beb1ebb8d6a208cb81fdfe62f4e52d7586033f534d35f981244\n\n      (For s390x architecture)\n      The image digest is sha256:5b964fa43873a20a66b95769bbcd6c31b028f505281fb045bb3c2ed6ca114e91\n\n      (For ppc64le architecture)\n      The image digest is sha256:2108325c5ee08249e1b0c0ad6a3daab197f5e2a1a83c8600d27c49ad0ff94307\n\n      (For aarch64 architecture)\n      The image digest is sha256:b465cef295a81eaf055c87a9af6d8ecdcc11cb1e898895d6df527eb155a7ff82\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.","url":"https://access.redhat.com/errata/RHSA-2026:0332"},{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."}],"purl":"pkg:generic/redhat/rhcos@418.94.202601071817?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:python3.12-0:3.12.13-2.el8_10.s390x","product":"python3.12-0:3.12.13-2.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:10950"},{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."}],"purl":"pkg:rpm/redhat/python3.12@3.12.13-2.el8_10?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"AppStream-8.8.0.Z.TUS:spice-client-win-x86-0:8.10-3.el8_8.1.noarch","product":"spice-client-win-x86-0:8.10-3.el8_8.1.noarch as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:0001"},{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."}],"purl":"pkg:rpm/redhat/spice-client-win-x86@8.10-3.el8_8.1?arch=noarch","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:python3.12-libs-0:3.12.13-2.el9_8.i686","product":"python3.12-libs-0:3.12.13-2.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:19177"},{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."}],"purl":"pkg:rpm/redhat/python3.12-libs@3.12.13-2.el9_8?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.5.0-1.el8_10.aarch64","product":"expat-0:2.5.0-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:21776"},{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."}],"purl":"pkg:rpm/redhat/expat@2.5.0-1.el8_10?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"BaseOS-9.2.0.Z.E4S:expat-0:2.5.0-1.el9_2.3.src","product":"expat-0:2.5.0-1.el9_2.3.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:22034"},{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."}],"purl":"pkg:rpm/redhat/expat@2.5.0-1.el9_2.3?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"CRB-10.2.Z:python3.12-debuginfo-0:3.12.13-2.el10_2.aarch64","product":"python3.12-debuginfo-0:3.12.13-2.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:19064"},{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."}],"purl":"pkg:rpm/redhat/python3.12-debuginfo@3.12.13-2.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"CRB-9.8.0.Z.MAIN.EUS:python3.12-debuginfo-0:3.12.13-2.el9_8.aarch64","product":"python3.12-debuginfo-0:3.12.13-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:19177"},{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."}],"purl":"pkg:rpm/redhat/python3.12-debuginfo@3.12.13-2.el9_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"Red Hat Ceph Storage 8:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:a05f9ecd070a8a1ac7c8ba56d5551642f81d275f54f0af45e0ecb6e46103d4f8_ppc64le","product":"registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:a05f9ecd070a8a1ac7c8ba56d5551642f81d275f54f0af45e0ecb6e46103d4f8_ppc64le as a component of Red Hat Ceph Storage 8","status":"fixed","remediations":[{"category":"vendor_fix","details":"The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.","url":"https://access.redhat.com/errata/RHSA-2025:23227"},{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."}],"purl":"pkg:oci/rhceph-8-rhel9@sha256%3Aa05f9ecd070a8a1ac7c8ba56d5551642f81d275f54f0af45e0ecb6e46103d4f8?arch=ppc64le&repository_url=registry.redhat.io/rhceph","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-tp-rhel9@sha256:2dc99bbbcad15bd50b1ad227f6d4557f5b17fed7388e3eb127c058e3f4636b15_amd64","product":"registry.redhat.io/rhui5/rhua-tp-rhel9@sha256:2dc99bbbcad15bd50b1ad227f6d4557f5b17fed7388e3eb127c058e3f4636b15_amd64 as a component of Red Hat Update Infrastructure 5","status":"fixed","remediations":[{"category":"vendor_fix","details":"Please consult the RHUI Technology Preview Release Notes at https://access.redhat.com/articles/7141172\nfor instructions on how to use this image set.","url":"https://access.redhat.com/errata/RHSA-2026:58981"},{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."}],"purl":"pkg:oci/rhua-tp-rhel9@sha256%3A2dc99bbbcad15bd50b1ad227f6d4557f5b17fed7388e3eb127c058e3f4636b15?arch=amd64&repository_url=registry.redhat.io/rhui5/rhua-tp-rhel9&tag=1787241260","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_10:firefox","product":"firefox as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_10:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_10:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_8:firefox","product":"firefox as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_8:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_8:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_8:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_9:firefox","product":"firefox as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/firefox","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_9:firefox.src","product":"firefox.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/firefox?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_9:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_9:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate the issue, limit XML input size and complexity before parsing, and avoid accepting compressed or deeply nested XML. Use OS-level resource controls (like ulimit or setrlimit()) to cap memory usage, or run the parser in a sandboxed or isolated process with strict memory and CPU limits. This helps prevent denial-of-service by containing excessive resource consumption."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"AppStream-9.0.0.Z.E4S:expat-debuginfo-0:2.2.10-12.el9_0.4.aarch64","product":"expat-debuginfo-0:2.2.10-12.el9_0.4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debuginfo@2.2.10-12.el9_0.4?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"AppStream-9.4.0.Z.EUS:expat-debuginfo-0:2.5.0-2.el9_4.3.x86_64","product":"expat-debuginfo-0:2.5.0-2.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debuginfo@2.5.0-2.el9_4.3?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"BaseOS-8.6.0.Z.AUS:expat-debuginfo-0:2.2.10-1.el8_6.x86_64","product":"expat-debuginfo-0:2.2.10-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debuginfo@2.2.10-1.el8_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"BaseOS-8.8.0.Z.E4S:expat-debugsource-0:2.2.10-1.el8_8.x86_64","product":"expat-debugsource-0:2.2.10-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debugsource@2.2.10-1.el8_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"BaseOS-9.4.0.Z.EUS:expat-debuginfo-0:2.5.0-2.el9_4.3.i686","product":"expat-debuginfo-0:2.5.0-2.el9_4.3.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/expat-debuginfo@2.5.0-2.el9_4.3?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"Red Hat Advanced Cluster Security 4.7:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7c0a23278a9180c3f586004986fea37fdaa29905997368290ec5633fd14d6107_ppc64le","product":"registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:7c0a23278a9180c3f586004986fea37fdaa29905997368290ec5633fd14d6107_ppc64le as a component of Red Hat Advanced Cluster Security 4.7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A7c0a23278a9180c3f586004986fea37fdaa29905997368290ec5633fd14d6107?arch=ppc64le&repository_url=registry.redhat.io/advanced-cluster-security","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:1b6d931578d1e5e82e305e62a8328278b8292d63ef70a88b436fae6c171905b5_s390x","product":"registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:1b6d931578d1e5e82e305e62a8328278b8292d63ef70a88b436fae6c171905b5_s390x as a component of Red Hat Advanced Cluster Security 4.8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/rhacs-scanner-db-rhel8@sha256%3A1b6d931578d1e5e82e305e62a8328278b8292d63ef70a88b436fae6c171905b5?arch=s390x&repository_url=registry.redhat.io/advanced-cluster-security","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"Red Hat Ceph Storage 8:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cec72610bc57414cba82f7089059af4408d7c51022c15bd0214e03a1c313e950_arm64","product":"registry.redhat.io/rhceph/keepalived-rhel9@sha256:cec72610bc57414cba82f7089059af4408d7c51022c15bd0214e03a1c313e950_arm64 as a component of Red Hat Ceph Storage 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/keepalived-rhel9@sha256%3Acec72610bc57414cba82f7089059af4408d7c51022c15bd0214e03a1c313e950?arch=arm64&repository_url=registry.redhat.io/rhceph","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:84021c67a5bd508aff6efc6e641f108175e617ef3eef2019f5cecd25dc9a0691_amd64","product":"registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:84021c67a5bd508aff6efc6e641f108175e617ef3eef2019f5cecd25dc9a0691_amd64 as a component of Red Hat Quay 3.16","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A84021c67a5bd508aff6efc6e641f108175e617ef3eef2019f5cecd25dc9a0691?arch=amd64&repository_url=registry.redhat.io/quay&tag=1767970158","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]},{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json","productId":"red_hat_enterprise_linux_8:xmlrpc-c.src","product":"xmlrpc-c.src as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/xmlrpc-c?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-59375","modified":"2026-10-09T01:06:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json"}]}],"vendorCoverage":{"total":831,"shown":32,"omitted":799,"source":"redhat"}}