4074 matches found
Astra Linux – Vulnerabilities in Python 2.7, Python 3.11, Python 3.7
When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model, a C stack overflow occurs...
Astra Linux – Vulnerability in Firefox and Thunderbird
A read operation outside of its bound range could have caused a crash in the RLBox Expat driver. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...
Astra Linux – Vulnerability in expat
In Expat also known as libexpat, before version 2.4.5, an attacker could trigger stack exhaustion in buildmodel by using a large nesting depth in the DTD element...
Astra Linux – Vulnerability in expat
In Expat also known as libexpat, before version 2.4.5, there is an integer overflow in the copyString function...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
The addBinding method in xmlparse.c within Expat also known as libexpat has an integer overflow issue before version 2.4.3...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
In xmltokimpl.c within Expat also known as libexpat, before version 2.4.5, there was no proper validation of encoding. This meant that there were no checks to determine whether a UTF-8 character was valid in a particular context...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat
Expat also known as libexpat prior to version 2.4.4 has a signed integer overflow issue in XMLGetBuffer, especially for configurations where XMLCONTEXTBYTES is non-zero...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
The lookup function in xmlparse.c within Expat also known as libexpat has an integer overflow before version 2.4.3...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
The issue with integer overflow occurs in storeAtts in the xmlparse.c file, within the Expat library also known as libexpat, before version 2.4.3...
Astra Linux – Vulnerability in libxmltok
In the libexpat library in ExPat before version 2.2.7, XML input containing XML elements with a large number of colons could cause the XML parser to consume a high amount of RAM and CPU resources during processing. This behavior could potentially be exploited in denial-of-service attacks...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
In doProlog, within xmlparse.c of the Expat library also known as libexpat, there is an integer overflow issue related to mgroupSize before version 2.4.3...
Astra Linux – Vulnerability in libxmltok
In libexpat before version 2.2.8, crafted XML inputs could trick the parser into switching from DTD parsing to document parsing too early. A consecutive call to XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber would then lead to a heap-based buffer overflow...
Astra Linux – Vulnerability in Firefox, expat, libxmltok, Thunderbird
The libexpat library before version 2.4.9 has a use-after-free issue in the doContent function of the xmlparse.c file...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
The defineAttribute function in xmlparse.c of Expat also known as libexpat has an integer overflow before version 2.4.3...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
The nextScaffoldPart function in xmlparse.c of Expat also known as libexpat, prior to version 2.4.3, has an integer overflow issue...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
In xmlparse.c within Expat also known as libexpat, prior to version 2.4.5, attackers could insert namespace-separator characters into namespace URIs...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat
The buildmodel function in xmlparse.c within ExPat also known as libexpat has an integer overflow issue before version 2.4.3...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat
In Expat also known as libexpat, before version 2.4.5, there is an integer overflow in storeRawNames...
python3.14 security update
3.14.7-2 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 3.14.7-1 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 3.14.6-1 - Update to Python 3.14.6 Related: RHEL-227190...
