Lucene search

K
cvelistMitreCVELIST:CVE-2019-15903
HistorySep 04, 2019 - 5:59 a.m.

CVE-2019-15903

2019-09-0405:59:16
mitre
raw.githubusercontent.com
1

7.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.4%

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.