Lucene search
+L

41 matches found

OSV
OSV
added 2025/10/14 3:35 p.m.7 views

JLSEC-2025-44 addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...

9.8CVSS7.1AI score0.04829EPSS
SaveExploits0References6
OSV
OSV
added 2023/07/29 11:5 a.m.10 views

OESA-2023-1454 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow.CVE-2022-22822 buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an...

9.8CVSS8.7AI score0.04829EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/11/08 10:1 a.m.12 views

expat: Integer overflow in addBinding in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability confidentiality a...

9.8CVSS7.5AI score0.04829EPSS
SaveExploits0References5
OSV
OSV
added 2022/08/17 6:50 p.m.22 views

CLSA-2022-1660762248 Fixed 13 CVEs in expat

CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames - CVE-2022-22822: Fix integer overflow in addBinding -...

9.8CVSS7.2AI score0.35867EPSS
SaveExploits3References1
RedHat Linux
RedHat Linux
added 2022/05/17 7:10 p.m.18 views

expat: Integer overflow in addBinding in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability confidentiality a...

9.8CVSS7.5AI score0.04829EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/05/11 12:0 a.m.8 views

The vulnerability of the addBinding() function in the Expat library allows a hacker to execute arbitrary code.

The vulnerability of the addBinding function in the Expat library is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

10CVSS8.1AI score0.04829EPSS
SaveExploits0References28Affected Software16
RedHat Linux
RedHat Linux
added 2022/03/28 12:1 p.m.10 views

expat: Integer overflow in addBinding in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability confidentiality a...

9.8CVSS7.5AI score0.04829EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/03/16 4:21 p.m.8 views

expat: Integer overflow in addBinding in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability confidentiality a...

9.8CVSS7.5AI score0.04829EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/03/14 10:48 a.m.10 views

expat: Integer overflow in addBinding in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability confidentiality a...

9.8CVSS7.5AI score0.04829EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/03/14 10:16 a.m.8 views

expat: Integer overflow in addBinding in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability confidentiality a...

9.8CVSS7.5AI score0.04829EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/03/10 4:37 p.m.11 views

expat: Integer overflow in addBinding in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability confidentiality a...

9.8CVSS7.5AI score0.04829EPSS
SaveExploits0References5
CNVD
CNVD
added 2022/01/14 12:0 a.m.42 views

Expat addBinding function buffer overflow vulnerability

Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in the addBinding in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary...

9.8CVSS6.2AI score0.04829EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/01/11 9:49 a.m.36 views

Integer Overflow

libexpat.so is vulnerable to denial of serviceDOS attacks. The vulnerability exists due to the integer overflow in the addBinding of xmlparse.c, allowing an attacker to cause an application crash...

9.8CVSS4.3AI score0.04829EPSS
SaveExploits0References7Affected Software23
OSV
OSV
added 2022/01/10 2:12 p.m.7 views

DEBIAN-CVE-2022-22822

addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...

9.8CVSS7.4AI score0.04829EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/10 2:12 p.m.12 views

AZL-7156 CVE-2022-22822 affecting package expat for versions less than 2.4.3-1

addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...

9.8CVSS7AI score0.04829EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/10 2:12 p.m.8 views

UBUNTU-CVE-2022-22822

addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...

9.8CVSS7AI score0.04829EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.6 views

Expat 输入验证错误漏洞

Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in the addBinding in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary...

9.8CVSS9.3AI score0.04829EPSS
SaveExploits0References47
CVE
CVE
added 2022/01/08 2:57 a.m.427 views

CVE-2022-22822

CVE-2022-22822 affects Expat (libexpat) prior to 2.4.3, where addBinding in xmlparse.c can overflow an integer and enable remote code execution or other impact as described in published advisories. The vulnerability is tied to an integer overflow in xmlparse.c (addBinding), with CVSS-derived seve...

9.8CVSS9.5AI score0.04829EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2022/01/08 2:57 a.m.51 views

CVE-2022-22822

addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...

9.8CVSS8.8AI score0.04829EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/01/08 12:0 a.m.15 views

PT-2022-1362 · Expat +12 · Expat +12

Name of the Vulnerable Software and Affected Versions: Expat aka libexpat versions prior to 2.4.3 Description: The issue is related to an integer overflow in the addBinding function of the Expat library. This could allow a remote attacker to execute arbitrary code on the system by persuading a...

10CVSS8.4AI score0.35867EPSS
SaveExploits16References313
Rows per page
Query Builder