4125 matches found
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
...
Expat build_model function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in buildmodel in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code ...
Expat lookup function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in xmlparse.c in lookup when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on t...
Expat nextScaffoldPart buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in xmlparse.c in nextScaffoldPart when processing untrusted input. A remote attacker could exploit this vulnerability to execute arbitra...
Expat defineAttribute function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in defineAttribute in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary...
Expat storeAtt function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. libexpat is a streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in storeAtts in xmlparse.c when processing untrusted input. A remote attacker could...
Expat addBinding function buffer overflow vulnerability
Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in the addBinding in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary...
In Expat (aka libexpat) before 2.4.3 a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g. allocating too few bytes or only freeing memory).
...
CVE-2022-22827
storeAtts in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
DEBIAN-CVE-2022-22827
storeAtts in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
DEBIAN-CVE-2022-22826
nextScaffoldPart in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
CVE-2022-22826
nextScaffoldPart in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
AZL-7160 CVE-2022-22826 affecting package expat for versions less than 2.4.3-1
nextScaffoldPart in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
AZL-7161 CVE-2022-22827 affecting package expat for versions less than 2.4.3-1
storeAtts in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
DEBIAN-CVE-2022-22825
lookup in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
AZL-7157 CVE-2022-22823 affecting package expat for versions less than 2.4.3-1
buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...