CVE-2015-7995: The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an ele...

Security readout for executives and security teams

CVE-2015-7995 is a denial-of-service flaw in libxslt 1.1.28. A specially crafted XML file can trigger a type confusion condition and crash processing. The evidence points to availability impact only, not data theft or code execution. Exposure is most likely where servers, desktop apps, build tools, or appliances process untrusted XML or XSLT through libxslt 1.1.28 or vendor-bundled libxslt. The bundle does not provide complete affected product or CPE data. Treat this as a routine-to-priority availability risk, not an emergency based on current evidence. Focus remediation on internet-facing or business-critical services that parse external XML, then fold remaining assets into standard patch cycles. Mitigation focus: Inventory systems and applications that include libxslt or vendor-bundled XML processing components.; Apply relevant vendor updates from Debian, Apple, HPE, Puppet, Oracle, SUSE, Slackware, or your platform vendor.; Prioritize systems that process XML or XSLT from users, partners, uploads, or external feeds..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.