Lucene search

K
broadcomBroadcom Security ResponseBSNSA22400
HistoryAug 01, 2023 - 12:00 a.m.

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion

2023-08-0100:00:00
Broadcom Security Response
support.broadcom.com
8

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

74.9%

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.