CLSA-2026-1776243051 expat: Fix of 2 CVEs

CVE-2022-25313: prevent stack exhaustion in buildmodel - CVE-2024-50602: make XMLStopParser refuse to stop/suspend an unstarted parser...

expat: Expat: Denial of Service vulnerability in XML parsing

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

JLSEC-2025-45 `build_model` in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...

PT-2025-46026

In Expat aka libexpat before 2.4.5, an attacker can trigger stack exhaustion in build model via a large nesting depth in the DTD element...

Cyber A.I. Group Announces Substantial Expansion of Acquisition Pipeline

Pipeline Will Support Company’s Highly Proactive Buy & Build Business Model...

CLSA-2022-1660762248 Fixed 13 CVEs in expat

CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames - CVE-2022-22822: Fix integer overflow in addBinding -...

CLSA-2022-1660757175 Fixed 15 CVEs in expat

CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames - CVE-2022-22822: Fix integer overflow in addBinding -...

expat: Expat: Denial of Service vulnerability in XML parsing

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

expat: Expat: Denial of Service vulnerability in XML parsing

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

expat: Expat: Denial of Service vulnerability in XML parsing

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

expat: Expat: Denial of Service vulnerability in XML parsing

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

The vulnerability of the `build_model` function in the Expat library, related to buffer overflow in the stack, allows an attacker to execute arbitrary code.

The vulnerability of the buildmodel function in the Expat library is related to an error in determining the boundaries during the buildmodel process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the `build_model` function in the ExPat library, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the buildmodel function in the Expat library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

In Expat (aka libexpat) before 2.4.5 an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

...

DEBIAN-CVE-2022-25313

In Expat aka libexpat before 2.4.5, an attacker can trigger stack exhaustion in buildmodel via a large nesting depth in the DTD element...

PT-2022-1765

Name of the Vulnerable Software and Affected Versions Expat aka libexpat versions prior to 2.4.5 Description The issue is related to a stack exhaustion vulnerability in the build model function of the Expat library, caused by a large nesting depth in the DTD element. This can allow a remote...

Expat 资源管理错误漏洞

Expat is a fast streaming XML parser written in C. A security vulnerability existed prior to Expat 2.4.5, which could be exploited by an attacker to trigger stack exhaustion in buildmodel via a large nesting depth in the DTD element...

build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

...

DEBIAN-CVE-2022-22823

buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...

Expat 输入验证错误漏洞

Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in buildmodel in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code ...