expat: expat: Denial of Service via improper memory tracking in XML_ParserReset

A flaw was found in expat. This vulnerability allows a remote attacker to cause a Denial of Service DoS by submitting a large XML document to an application that reuses parser instances. When the XML parser is reset using XMLParserReset, it clears the direct byte count but fails to offset tracked...

SUSE CVE-2026-113351

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

Missing Initialization of Resource

Overview Affected versions of this package are vulnerable to Missing Initialization of Resource via the XMLParserReset function. An attacker can cause the parser to fail to process subsequent XML documents by submitting a large XML document, which results in memory allocation issues and persisten...

CVE-2026-113351

A flaw was found in expat. This vulnerability allows a remote attacker to cause a Denial of Service DoS by submitting a large XML document to an application that reuses parser instances. When the XML parser is reset using XMLParserReset, it clears the direct byte count but fails to offset tracked...

CVE-2026-113351

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

DEBIAN-CVE-2026-113351

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

AZL-109989 CVE-2026-113351 affecting package expat 2.8.3-2

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

UBUNTU-CVE-2026-113351

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

CVE-2026-113351

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

CVE-2026-113351

The libexpat library, versions 2.7.2 through 2.9.0 , is vulnerable to a Denial of Service (DoS) condition. The root cause is located in the XML_ParserReset function, which zeroes the direct byte count but fails to offset tracked heap allocations. An attacker can exploit this by submitting a large...

CVE-2026-113351

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

EUVD-2026-104922

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

CVE-2026-113351 libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

CVE-2026-113351 libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

CVE-2026-113351 libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

CVE-2026-113351

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

Linux Distros Unpatched Vulnerability : CVE-2026-113351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap...

Red Hat: CVE-2026-113351: expat: expat: Denial of Service via improper memory tracking in XML_ParserReset

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XMLERRORNOMEMORY until it is...

Expat development team: Expat resource management error vulnerability

The Expat development team’s version 2.7.2 to 2.9.0 contains a resource management vulnerability. This vulnerability arises from XMLParserReset resetting the direct byte count without offsetting the already tracked heap allocations. As a result, when an attacker submits a large XML document,...

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

...