PT-2026-80468

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML GetBuffer, XML Parse, XML ParseBuffer, XML ParserFree, or XML ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,...

Siemens SIMATIC S7-1500 Integer Overflow or Wraparound (CVE-2022-23852)

Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

PT-2025-46022

Expat aka libexpat before 2.4.4 has a signed integer overflow in XML GetBuffer, for configurations with a nonzero XML CONTEXT BYTES...

ALPINE-CVE-2022-23852

Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...

AZL-7835 CVE-2022-23852 affecting package expat for versions less than 2.4.8-1

Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...

UBUNTU-CVE-2022-23852

Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...

libexpat 输入验证错误漏洞

libexpat is a streaming XML parser written in the C language. An input validation error vulnerability exists in Libexpat that stems from the product's XMLGetBuffer not effectively limiting the range of signed integers. An attacker could cause a buffer overflow by configuring a special XML byte. T...

PT-2022-1365

Name of the Vulnerable Software and Affected Versions Expat aka libexpat versions prior to 2.4.4 Description The issue is related to a signed integer overflow in XML GetBuffer, which can be exploited by sending specially crafted data, potentially allowing a remote attacker to execute arbitrary...

chromium-browser: Heap-buffer-overflow in expat.

Multiple integer overflows in the XMLGetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted XML data, a related...

DLA-281-1 expat - security update

Bulletin has no description...

expat: Integer overflow leading to buffer overflow in XML_GetBuffer()

Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283...