12 matches found
PT-2026-107540
Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.9.0 Description A heap buffer over-read exists in the xmlparse.c file. The XML ParseBuffer function advances the parse buffer end using a caller-supplied length that is not validated against the allocated buffer...
PT-2026-80468
libexpat before 2.8.2 lacks handler call depth tracking for calls to XML GetBuffer, XML Parse, XML ParseBuffer, XML ParserFree, or XML ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,...
PT-2026-80473
libexpat before 2.8.2 has an integer overflow in XML ParseBuffer because it lacked a check that was present in XML Parse...
SUSE CVE-2026-56406
libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper validation in the XMLParseBuffer function. An attacker can cause unexpected behavior, including potential data corruption or application crashes, by providing specially crafted input that...
PT-2026-51242
Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.8.2 Description An integer overflow occurs in the XML ParseBuffer function because it lacks a specific check that is implemented in the XML Parse function. Recommendations Update to version 2.8.2 or later...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mingw-expat (UTSA-2026-004806)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004806 advisory. An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer. Tenable has extracted the preceding description...
PT-2025-46035
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML ParseBuffer...
Astra Linux – Vulnerability in expat
A issue was discovered in libexpat before version 2.6.3. In xmlparse.c, a negative length value for XMLParseBuffer is allowed without being rejected...
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to OpenSSL and libexpat
Summary OpenSSL and Libexpat used by IBM MQ Operator and Queue Manager container images are vulnerable to denial of service due to improper memory allocation, and providing weaker than expected security which might allow an attacker to execute arbitrary code on the system. This bulletin identifie...
