CVE-2012-6139: libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and cr...

Security readout for executives and security teams

CVE-2012-6139 is a libxslt crash vulnerability fixed before version 1.1.28. A remote attacker could cause denial of service when affected software processes certain malformed XSLT features. The business impact is service interruption, not confirmed data theft or code execution from the provided sources. Exposure is most likely in applications or operating system packages using libxslt before 1.1.28, especially where remote or user-controlled XML/XSLT content is transformed. The source bundle does not provide CPEs or a full affected product inventory. Treat as a targeted availability risk. Prioritize internet-facing or customer-facing services that process untrusted XML/XSLT, then standardize patching through normal dependency and OS package management. Mitigation focus: Upgrade libxslt to version 1.1.28 or later where applicable.; Apply fixed operating system vendor packages from relevant distro advisories.; Review vendor guidance for unsupported or embedded libxslt copies..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.