BaseFortify

Publication date: 2025-10-03

Last updated on: 2025-10-06

Assigner: TQtC

Description

The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-03

Last Modified

2025-10-06

Generated

2026-07-07

AI Q&A

2025-10-03

EPSS Evaluated

2026-07-05

NVD

CVE-2025-10729

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability occurs when the module parses a <pattern> node that is not a child of a structural node. After the node is created, it is deleted but might still be accessed later, leading to a use-after-free condition.

Impact Analysis

The use-after-free vulnerability can lead to severe impacts such as system crashes, data corruption, or potential execution of arbitrary code, given its high severity score.

Hi! I’m here to help you understand CVE-2025-10729. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70