CLSA-2026-1770735752 expat: Fix of CVE-2026-24515

🗓️ 10 Feb 2026 15:02:37Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Fixes a null pointer dereference in the XML parser due to missing user data for unknown encoding handlers.

Reporter	Title	Published	Views	Family All 206
FreeBSD	expat -- multiple vulnerabilities	31 Jan 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: AIX/VIOS Python is vulnerable to a null pointer dereference (CVE-2026-24515) and an integer overflow (CVE-2026-25210)	17 Mar 202622:03	–	ibm
IBM Security Bulletins	Security Bulletin: AIX/VIOS Perl is vulnerable to a null pointer dereference (CVE-2026-24515) and an integer overflow (CVE-2026-25210)	17 Mar 202622:04	–	ibm
ATTACKERKB	CVE-2026-24515	23 Jan 202607:46	–	attackerkb
AlpineLinux	CVE-2026-24515	23 Jan 202607:46	–	alpinelinux
AstraLinux	Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat	19 Jun 202611:10	–	astralinux
BDU FSTEC	The vulnerability of the libexpat library for analyzing XML files, related to the swapping of the zero pointer, allows an attacker to trigger a service failure.	25 Mar 202600:00	–	bdu_fstec
CBLMariner	CVE-2026-24515 affecting package expat for versions less than 2.6.4-4	9 Feb 202623:37	–	cbl_mariner
CBLMariner	CVE-2026-24515 affecting package expat for versions less than 2.6.4-3	5 Feb 202622:21	–	cbl_mariner
Chainguard	CVE-2026-24515 vulnerabilities	1 Jul 202614:16	–	cgr