Read the docs
TI-2012-02507 Aliases CVE-2012-2893GHSA-8rww-q75g-4r2c

Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79…

Priority LOW 33CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-399 and the CVSS impact.

Summary

Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms.

Why it matters now

EPSS 0.01478 74th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 53

CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*up to 22.0.1229.78VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.0:*:*:*:*:*:*:*22.0.1229.0VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.1:*:*:*:*:*:*:*22.0.1229.1VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.2:*:*:*:*:*:*:*22.0.1229.2VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.3:*:*:*:*:*:*:*22.0.1229.3VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.4:*:*:*:*:*:*:*22.0.1229.4VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.6:*:*:*:*:*:*:*22.0.1229.6VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.7:*:*:*:*:*:*:*22.0.1229.7VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.8:*:*:*:*:*:*:*22.0.1229.8VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.9:*:*:*:*:*:*:*22.0.1229.9VulnerableGoogle
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 22.0.1229.78 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.0:*:*:*:*:*:*:* Versions 22.0.1229.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.1:*:*:*:*:*:*:* Versions 22.0.1229.1 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.2:*:*:*:*:*:*:* Versions 22.0.1229.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.3:*:*:*:*:*:*:* Versions 22.0.1229.3 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.4:*:*:*:*:*:*:* Versions 22.0.1229.4 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.6:*:*:*:*:*:*:* Versions 22.0.1229.6 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.7:*:*:*:*:*:*:* Versions 22.0.1229.7 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.8:*:*:*:*:*:*:* Versions 22.0.1229.8 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.9:*:*:*:*:*:*:* Versions 22.0.1229.9 Vulnerable ·Google
Show 43 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:22.0.1229.10:*:*:*:*:*:*:*22.0.1229.10VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.11:*:*:*:*:*:*:*22.0.1229.11VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.12:*:*:*:*:*:*:*22.0.1229.12VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.14:*:*:*:*:*:*:*22.0.1229.14VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.16:*:*:*:*:*:*:*22.0.1229.16VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.17:*:*:*:*:*:*:*22.0.1229.17VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.18:*:*:*:*:*:*:*22.0.1229.18VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.20:*:*:*:*:*:*:*22.0.1229.20VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.21:*:*:*:*:*:*:*22.0.1229.21VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.22:*:*:*:*:*:*:*22.0.1229.22VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.23:*:*:*:*:*:*:*22.0.1229.23VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.24:*:*:*:*:*:*:*22.0.1229.24VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.25:*:*:*:*:*:*:*22.0.1229.25VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.26:*:*:*:*:*:*:*22.0.1229.26VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.27:*:*:*:*:*:*:*22.0.1229.27VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.28:*:*:*:*:*:*:*22.0.1229.28VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.29:*:*:*:*:*:*:*22.0.1229.29VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.31:*:*:*:*:*:*:*22.0.1229.31VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.32:*:*:*:*:*:*:*22.0.1229.32VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.33:*:*:*:*:*:*:*22.0.1229.33VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.35:*:*:*:*:*:*:*22.0.1229.35VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.36:*:*:*:*:*:*:*22.0.1229.36VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.37:*:*:*:*:*:*:*22.0.1229.37VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.39:*:*:*:*:*:*:*22.0.1229.39VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.48:*:*:*:*:*:*:*22.0.1229.48VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.49:*:*:*:*:*:*:*22.0.1229.49VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.50:*:*:*:*:*:*:*22.0.1229.50VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.51:*:*:*:*:*:*:*22.0.1229.51VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.52:*:*:*:*:*:*:*22.0.1229.52VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.53:*:*:*:*:*:*:*22.0.1229.53VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.54:*:*:*:*:*:*:*22.0.1229.54VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.55:*:*:*:*:*:*:*22.0.1229.55VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.56:*:*:*:*:*:*:*22.0.1229.56VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.57:*:*:*:*:*:*:*22.0.1229.57VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.58:*:*:*:*:*:*:*22.0.1229.58VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.59:*:*:*:*:*:*:*22.0.1229.59VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.60:*:*:*:*:*:*:*22.0.1229.60VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.62:*:*:*:*:*:*:*22.0.1229.62VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.63:*:*:*:*:*:*:*22.0.1229.63VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.64:*:*:*:*:*:*:*22.0.1229.64VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.65:*:*:*:*:*:*:*22.0.1229.65VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.67:*:*:*:*:*:*:*22.0.1229.67VulnerableGoogle
cpe:2.3:a:google:chrome:22.0.1229.76:*:*:*:*:*:*:*22.0.1229.76VulnerableGoogle
  • cpe:2.3:a:google:chrome:22.0.1229.10:*:*:*:*:*:*:* Versions 22.0.1229.10 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.11:*:*:*:*:*:*:* Versions 22.0.1229.11 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.12:*:*:*:*:*:*:* Versions 22.0.1229.12 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.14:*:*:*:*:*:*:* Versions 22.0.1229.14 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.16:*:*:*:*:*:*:* Versions 22.0.1229.16 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.17:*:*:*:*:*:*:* Versions 22.0.1229.17 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.18:*:*:*:*:*:*:* Versions 22.0.1229.18 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.20:*:*:*:*:*:*:* Versions 22.0.1229.20 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.21:*:*:*:*:*:*:* Versions 22.0.1229.21 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.22:*:*:*:*:*:*:* Versions 22.0.1229.22 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.23:*:*:*:*:*:*:* Versions 22.0.1229.23 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.24:*:*:*:*:*:*:* Versions 22.0.1229.24 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.25:*:*:*:*:*:*:* Versions 22.0.1229.25 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.26:*:*:*:*:*:*:* Versions 22.0.1229.26 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.27:*:*:*:*:*:*:* Versions 22.0.1229.27 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.28:*:*:*:*:*:*:* Versions 22.0.1229.28 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.29:*:*:*:*:*:*:* Versions 22.0.1229.29 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.31:*:*:*:*:*:*:* Versions 22.0.1229.31 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.32:*:*:*:*:*:*:* Versions 22.0.1229.32 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.33:*:*:*:*:*:*:* Versions 22.0.1229.33 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.35:*:*:*:*:*:*:* Versions 22.0.1229.35 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.36:*:*:*:*:*:*:* Versions 22.0.1229.36 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.37:*:*:*:*:*:*:* Versions 22.0.1229.37 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.39:*:*:*:*:*:*:* Versions 22.0.1229.39 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.48:*:*:*:*:*:*:* Versions 22.0.1229.48 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.49:*:*:*:*:*:*:* Versions 22.0.1229.49 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.50:*:*:*:*:*:*:* Versions 22.0.1229.50 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.51:*:*:*:*:*:*:* Versions 22.0.1229.51 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.52:*:*:*:*:*:*:* Versions 22.0.1229.52 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.53:*:*:*:*:*:*:* Versions 22.0.1229.53 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.54:*:*:*:*:*:*:* Versions 22.0.1229.54 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.55:*:*:*:*:*:*:* Versions 22.0.1229.55 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.56:*:*:*:*:*:*:* Versions 22.0.1229.56 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.57:*:*:*:*:*:*:* Versions 22.0.1229.57 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.58:*:*:*:*:*:*:* Versions 22.0.1229.58 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.59:*:*:*:*:*:*:* Versions 22.0.1229.59 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.60:*:*:*:*:*:*:* Versions 22.0.1229.60 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.62:*:*:*:*:*:*:* Versions 22.0.1229.62 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.63:*:*:*:*:*:*:* Versions 22.0.1229.63 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.64:*:*:*:*:*:*:* Versions 22.0.1229.64 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.65:*:*:*:*:*:*:* Versions 22.0.1229.65 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.67:*:*:*:*:*:*:* Versions 22.0.1229.67 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:22.0.1229.76:*:*:*:*:*:*:* Versions 22.0.1229.76 Vulnerable ·Google

Remediation

Red Hat 1 advisory

  • RHSA-2012:1265 Released 2012-09-13 · Red Hat rating Important
    libxslt security update
    • RHEL Desktop Workstation (v. 5 client) libxslt-1.1.17-4.el5_8.3, libxslt-devel-1.1.17-4.el5_8.3, libxslt-devel-1.1.17-4.el5_8.3.i386
    • Red Hat Enterprise Linux (v. 5 server) libxslt-1.1.17-4.el5_8.3, libxslt-1.1.17-4.el5_8.3.i386, libxslt-1.1.17-4.el5_8.3.ia64 +9
    • Red Hat Enterprise Linux Desktop (v. 5 client) libxslt-1.1.17-4.el5_8.3, libxslt-1.1.17-4.el5_8.3.i386, libxslt-python-1.1.17-4.el5_8.3 +1
    • Red Hat Enterprise Linux Desktop (v. 6) libxslt-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux Desktop Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-devel-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux HPC Node (v. 6) libxslt-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-devel-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux Server (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-1.1.26-2.el6_3.1.ppc, libxslt-devel-1.1.26-2.el6_3.1 +1
    • Red Hat Enterprise Linux Server Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux Workstation (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-devel-1.1.26-2.el6_3.1
    • Red Hat Enterprise Linux Workstation Optional (v. 6) libxslt-1.1.26-2.el6_3.1, libxslt-python-1.1.26-2.el6_3.1

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
RHEL Desktop Workstation (v. 5 client)Fixed RHSA-2012:1265
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2012:1265
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2012:1265

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-2893
  2. 2026-10-03 Alias added: GHSA-8rww-q75g-4r2c

References

Advisory 3

Other 6

  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
See all 7586 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences