CVE-2025-10729CWE-416
CVE-2025-10729
published October 3, 2025
What it is
The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.
The record
Technical detail
- CVSS
- 9.4 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00219 · 11.7th percentile
- Weakness
- CWE-416 · Use After Free
- Published
- 2025-10-03T20:16Z
References (1)
EPSS history
Timeline