libexpat library is vulnerable to DoS attacks through stack overflow

🗓️ 09 May 2025 00:00:00Reported by CERTType

cert

cert🔗 www.kb.cert.org👁 21 Views

libexpat library vulnerable to DoS attacks via stack overflow when parsing nested XML documents.

Reporter	Title	Published	Views	Family All 297
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for October 2025 - Multiple CVEs addressed	3 Dec 202506:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a stack overflow vulnerability in libexpat library [CVE-2024-8176]	13 Jun 202516:26	–	ibm
IBM Security Bulletins	Security Bulletin: Oracle Outside In Technology (OIT) v8.5.7 BP7 vulnerabilities CVE-2025-29482 (vulnerable), CVE-2024-8176 (not vulnerable) in FileNet Content Manager (FNCM) Content Based Retrieval (CBR) content indexing	30 Mar 202609:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in expat library (CVE-2024-8176) affects Power HMC.	7 Jul 202505:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM TXSeries for Multiplatforms.	7 Jul 202514:23	–	ibm
IBM Security Bulletins	Security Bulletin: AIX/VIOS is vulnerable to denial of service and possible code execution due to Perl (WS-2025-0004)	5 Feb 202622:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	30 Sep 202508:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	20 May 202514:32	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to denial of service and possible code execution due to Perl (CVE-2024-8176, CVE-2024-56406)	26 Jun 202515:03	–	ibm
IBM Security Bulletins	Security Bulletin: AIX/VIOS is affected by a denial of service (CVE-2024-8176) due to Python	20 May 202516:39	–	ibm

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
blog	www.blog.hartwork.org/posts/expat-2-7-0-released/
github	www.github.com/libexpat/libexpat/issues/893
openwall	www.openwall.com/lists/oss-security/2025/03/15/1
access	www.access.redhat.com/errata/RHSA-2025:3531
access	www.access.redhat.com/errata/RHSA-2025:3734
access	www.access.redhat.com/errata/RHSA-2025:3913
access	www.access.redhat.com/errata/RHSA-2025:4048
access	www.access.redhat.com/security/cve/CVE-2024-8176
blog	www.blog.hartwork.org/posts/expat-2-7-0-released/

17 Jul 2025 12:42Current

8High risk

Vulners AI Score8

CVSS 3.17.5

EPSS0.00803

SSVC

libexpat library stack overflow denial of service xml parsing cve 2024 8176 memory corruption security patch