An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).

🗓️ 13 Sep 2024 07:00:00Reported by MicrosoftType

Libexpat before 2.6.3 has an integer overflow in dtdCopy for nDefaultAtts on 32-bit platforms.

Reporter	Title	Published	Views	Family All 324
ibm	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	7 Aug 202515:41	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
ibm	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	8 Aug 202509:58	–	ibm
ibm	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	4 Dec 202410:17	–	ibm
ibm	Security Bulletin: Vulnerability in libexpat affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	12 Mar 202517:39	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	19 Jun 202517:28	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition (ITNM).	29 Jan 202504:50	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	19 Jun 202517:24	–	ibm
ibm	Security Bulletin: AIX is affected by multiple vulnerabilities due to Python	5 Nov 202422:07	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	1 Sep 202507:46	–	ibm