1318 matches found
EUVD-2026-5042
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...
CVE-2026-25210
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...
CVE-2026-25210
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...
CVE-2026-25210
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...
CVE-2026-25210
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...
CVE-2026-25210
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...
libexpat input validation vulnerability
libexpat is a streaming XML parser written in C language by the libexpat team. Versions of libexpat prior to 2.7.4 had a vulnerability related to input validation errors. This vulnerability stemmed from a lack of integer overflow checks in the doContent function, which could lead to incorrect...
Astra Linux – Vulnerability in expat
In libexpat version 2.6.1, an XML Entity Expansion attack is possible when external parsers are used in isolation created using XMLExternalEntityParserCreate...
Astra Linux – Vulnerability in expat
There is a stack overflow vulnerability in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat may be forced to recur indefinitely, exhausting the stack space and causing a crash...
Astra Linux – Vulnerability in expat
A issue was discovered in libexpat before version 2.6.4. There is a crash within the XMLResumeParser function, as XMLStopParser can stop/suspend a parser that has not been started...
Advisory ROSA-SA-2026-3129
software: expat 2.7.3 OS: ROSA-CHROME unaffected versions = expat-2.7.3-1 affected versions expat-2.7.3-1 CVE-ID: CVE-2025-59375 BDU-ID: 2025-12925 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libexpat XML file parsing library is related to unrestricted resource allocation. Exploitation of th...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference due to improper handling of user data in the XMLExternalEntityParserCreate function. An attacker can cause a denial of service by supplying crafted input that triggers a null pointer dereference. Remediation...
ALPINE-CVE-2026-24515
In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data...
CVE-2026-24515
In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data. This vulnerability (CVE-2026-24515) is reflected across multiple advisories/plugins; remediation is to update expat to a version 2.7.4 or newer where the issue is fixed.
CVE-2026-24515
In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data...
CVE-2026-24515
In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data...
CVE-2026-24515
In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data...
CVE-2026-24515
In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data...
libexpat code issue vulnerabilities
libexpat is a streaming XML parser written in C language by the libexpat team. Versions of libexpat prior to 2.7.4 had code vulnerabilities; these vulnerabilities stemmed from the XMLExternalEntityParserCreate function not copying user data for unknown encoding processors...