91 matches found
Astra Linux – Vulnerability in expat
In Expat also known as libexpat, before version 2.4.5, there is an integer overflow in the copyString function...
Rocky Linux 8 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel Multiple Vulnerabilities (crlsa-2022_5314)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20225314 advisory. expat: stack exhaustion in doctype parsing CVE-2022-25313 expat: integer overflow in copyString CVE-2022-25314 Tenable has extracted the preceding...
AlmaLinux 9.2 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785887332)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785887332 advisory. - libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen. CVE-2026-56407 -...
Rocky Linux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1786034306)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786034306 advisory. - libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen. CVE-2026-56407...
Unity Linux 20.1070e Security Update: expat (UTSA-2026-099475)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099475 advisory. libexpat before 2.8.2 has an integer overflow in copyString. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...
CLSA-2026-1786451206 Fix CVE(s): CVE-2026-56407, CVE-2026-56408, CVE-2026-56409
SECURITY UPDATE: Integer overflow in doProlog related to storeEntityValue and entity textLen libexpat before 2.8.2 - debian/patches/CVE-2026-56407.patch: cap the entity value pool length at INTMAX before assigning it to the signed ENTITY::textLen in doProlog - CVE-2026-56407 SECURITY UPDATE:...
JLSEC-2026-1232
libexpat before 2.8.2 has an integer overflow in copyString...
PT-2026-80475
libexpat before 2.8.2 has an integer overflow in copyString...
CLSA-2026-1786034306 expat: Fix of 3 CVEs
CVE-2026-56407: cap entity textLen against signed integer overflow in doProlog - CVE-2026-56408: protect copyString from integer overflow - CVE-2026-56409: protect xmlwf output path join from integer overflow...
CLSA-2026-1786009371 expat: Fix of 3 CVEs
CVE-2026-56131: fix use-after-free from calling XMLResumeParser inside a handler by adding handler call depth tracking and rejecting re-entrant calls - CVE-2026-56407: fix signed integer overflow of entity textLen in doProlog for entity values larger than INTMAX - CVE-2026-56408: fix integer...
CLSA-2026-1785886642 Fix CVE(s): CVE-2026-56408
SECURITY UPDATE: integer overflow in copyString allocation size - debian/patches/CVE-2026-56408.patch: guard the copyString allocation length against integer overflow backport of libexpat commit 16e2efd, issue 565. - CVE-2026-56408...
SUSE CVE-2026-56408
libexpat before 2.8.2 has an integer overflow in copyString...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the copyString function. An attacker can cause memory corruption or potentially execute arbitrary code by providing specially crafted input that triggers the...
AZL-90225 CVE-2026-56408 affecting package expat for versions less than 2.8.2-1
libexpat before 2.8.2 has an integer overflow in copyString...
ALPINE-CVE-2026-56408
libexpat before 2.8.2 has an integer overflow in copyString...
CVE-2026-56408
libexpat before 2.8.2 has an integer overflow in copyString...
CVE-2026-56408
libexpat before 2.8.2 has an integer overflow in copyString...
UBUNTU-CVE-2026-56408
libexpat before 2.8.2 has an integer overflow in copyString...
