Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the endDoctypeDecl process when handling NOTATION declarations. An attacker can cause memory corruption or potentially execute arbitrary code by providing specially crafted XML input. Remediation Upgra...

CVE-2026-56408

libexpat before 2.8.2 has an integer overflow in copyString...

AZL-90249 CVE-2026-56409 affecting package expat for versions less than 2.8.2-1

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used...

ALPINE-CVE-2026-56408

libexpat before 2.8.2 has an integer overflow in copyString...

AZL-90252 CVE-2026-56410 affecting package expat for versions less than 2.8.2-1

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

ALPINE-CVE-2026-56409

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used...

CVE-2026-56409

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used...

ALPINE-CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

AZL-90225 CVE-2026-56408 affecting package expat for versions less than 2.8.2-1

libexpat before 2.8.2 has an integer overflow in copyString...

CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

ALPINE-CVE-2026-56406

libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse...

AZL-90231 CVE-2026-56404 affecting package expat for versions less than 2.8.2-1

libexpat before 2.8.2 has an integer overflow in addBinding...

CVE-2026-56405

libexpat before 2.8.2 has an integer overflow in getAttributeId...

CVE-2026-56404

libexpat before 2.8.2 has an integer overflow in addBinding...

CVE-2026-56407

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen...

ALPINE-CVE-2026-56405

libexpat before 2.8.2 has an integer overflow in getAttributeId...

AZL-90234 CVE-2026-56406 affecting package expat for versions less than 2.8.2-1

libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse...

AZL-90228 CVE-2026-56405 affecting package expat for versions less than 2.8.2-1

libexpat before 2.8.2 has an integer overflow in getAttributeId...

ALPINE-CVE-2026-56407

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen...

CVE-2026-56406

libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse...