23 matches found
PT-2026-117233
A vulnerability was found in ESPnet up to 202610.post2. This affects the function build model of the file espnet3/publication/inference model.py of the component Inference Model Handler. The manipulation of the argument target results in deserialization. It is possible to launch the attack...
CLSA-2026-1776243051 expat: Fix of 2 CVEs
CVE-2022-25313: prevent stack exhaustion in buildmodel - CVE-2024-50602: make XMLStopParser refuse to stop/suspend an unstarted parser...
expat: Expat: Denial of Service vulnerability in XML parsing
expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...
JLSEC-2025-45 `build_model` in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
PT-2025-46026
In Expat aka libexpat before 2.4.5, an attacker can trigger stack exhaustion in build model via a large nesting depth in the DTD element...
Cyber A.I. Group Announces Substantial Expansion of Acquisition Pipeline
Pipeline Will Support Company’s Highly Proactive Buy & Build Business Model...
CLSA-2022-1660762248 Fixed 13 CVEs in expat
CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames - CVE-2022-22822: Fix integer overflow in addBinding -...
CLSA-2022-1660757175 Fixed 15 CVEs in expat
CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames - CVE-2022-22822: Fix integer overflow in addBinding -...
expat: Expat: Denial of Service vulnerability in XML parsing
expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...
expat: Expat: Denial of Service vulnerability in XML parsing
expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...
expat: Expat: Denial of Service vulnerability in XML parsing
expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...
expat: Expat: Denial of Service vulnerability in XML parsing
expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...
ExPat integer overflow Code Execution
The vulnerability of the buildmodel function in the Expat library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Expat build_model Stack Buffer Overflow
The vulnerability of the buildmodel function in the Expat library is related to an error in determining the boundaries during the buildmodel process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
In Expat (aka libexpat) before 2.4.5 an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
...
DEBIAN-CVE-2022-25313
In Expat aka libexpat before 2.4.5, an attacker can trigger stack exhaustion in buildmodel via a large nesting depth in the DTD element...
PT-2022-1765
Name of the Vulnerable Software and Affected Versions Expat aka libexpat versions prior to 2.4.5 Description The issue is related to a stack exhaustion vulnerability in the build model function of the Expat library, caused by a large nesting depth in the DTD element. This can allow a remote...
Expat resource management error vulnerability
Expat is a fast streaming XML parser written in C. A security vulnerability existed prior to Expat 2.4.5, which could be exploited by an attacker to trigger stack exhaustion in buildmodel via a large nesting depth in the DTD element...