Astra Linux – Vulnerability in libxmltok

In libexpat before version 2.2.8, crafted XML inputs could trick the parser into switching from DTD parsing to document parsing too early. A consecutive call to XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber would then lead to a heap-based buffer overflow...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

Expat also known as libexpat before version 2.4.4 has an integer overflow in the doProlog function...

Astra Linux – Vulnerability in Firefox, expat, libxmltok, Thunderbird

The libexpat library before version 2.4.9 has a use-after-free issue in the doContent function of the xmlparse.c file...

Astra Linux – Vulnerabilities in expat, Firefox, Thunderbird

In libexpat before version 2.7.4, the doContent function does not properly determine the buffer size bufSize, as there is no check for integer overflow during the reallocation of the tag buffer...

Astra Linux – Vulnerability in libxmltok

In the libexpat library in ExPat versions before 2.2.7, XML inputs containing XML names with a large number of colons could cause the XML parser to consume a high amount of RAM and CPU resources during processing. This behavior could potentially be exploited in denial-of-service attacks...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

In Expat also known as libexpat, before version 2.4.5, there is an integer overflow in storeRawNames...

Astra Linux – Vulnerability in expat

In Expat also known as libexpat, before version 2.4.5, an attacker could trigger stack exhaustion in buildmodel by using a very deep nesting level within the DTD element...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

The issue with integer overflow occurs in storeAtts in the xmlparse.c file, within the Expat library also known as libexpat, before version 2.4.3...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok

The addBinding method in xmlparse.c within Expat also known as libexpat has an integer overflow issue before version 2.4.3...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

In Expat also known as libexpat, before version 2.4.3, a left shift of 29 or more in the storeAtts function in xmlparse.c could lead to improper realloc behavior. This could result in allocating too few bytes, or only freeing memory after it was no longer needed...

Astra Linux – Vulnerability in expat

In Expat also known as libexpat, before version 2.4.5, there is an integer overflow in the copyString function...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

Expat also known as libexpat before version 2.4.4 has a signed integer overflow issue in XMLGetBuffer, especially for configurations where XMLCONTEXTBYTES is non-zero...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

The nextScaffoldPart function in xmlparse.c of Expat also known as libexpat, prior to version 2.4.3, has an integer overflow issue...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

The lookup function in xmlparse.c within Expat also known as libexpat has an integer overflow before version 2.4.3...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

The defineAttribute function in xmlparse.c of Expat also known as libexpat has an integer overflow before version 2.4.3...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok

In xmlparse.c within Expat also known as libexpat, prior to version 2.4.5, attackers could insert namespace-separator characters into namespace URIs...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

The buildmodel function in xmlparse.c within ExPat also known as libexpat has an integer overflow issue before version 2.4.3...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok

The xmltokimpl.c file in Expat also known as libexpat lacks certain encoding validations before version 2.4.5. This means that there are no checks to determine whether a UTF-8 character is valid in a particular context...

Important Photon OS Security Update - PHSA-2026-4.0-1022

Updates of 'expat', 'strongswan' packages of Photon OS have been released...

Fedora 44 : mingw-expat (2026-163d1fe6c0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-163d1fe6c0 advisory. Update to expat-2.8.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...