1760 matches found
OESA-2026-1706 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.CVE-2025-59375 Race...
The vulnerability of the libexpat library for analyzing XML files is related to algorithmic complexity, which allows attackers to cause a service failure.
The vulnerability of the libexpat library for analyzing XML files is related to its algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the libexpat library for analyzing XML files, related to integer overflow, allows attackers to cause a service failure.
The vulnerability of the libexpat library for analyzing XML files is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the libexpat library for analyzing XML files, related to the swapping of the zero pointer, allows an attacker to trigger a service failure.
The vulnerability of the libexpat library for analyzing XML files is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing
A memory amplification vulnerability in libexpat allows attackers to trigger excessive dynamic memory allocations by submitting specially crafted XML input. A small input 250 KiB can cause the parser to allocate hundreds of megabytes, leading to denial-of-service DoS through memory exhaustion...
Mageia: Security Advisory (MGASA-2026-0061)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Advisory ROSA-SA-2026-3235
software: expat 2.7.4 OS: ROSA-CHROME unaffected versions = expat-2.7.4-1 affected versions expat-2.7.4-1 CVE-ID: CVE-2026-24515 BDU-ID: None CVE-Crit: LOW CVE-DESC.: In libexpat before 2.7.4, the XMLExternalEntityParserCreate function does not copy custom handler data of unknown encoding...
Updated expat packages fix security vulnerabilities
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content. CVE-2026-32776 libexpat before 2.7.5 allows an infinite loop while parsing DTD content. CVE-2026-32777 libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry...
Security Bulletin: AIX/VIOS Python is vulnerable to a null pointer dereference (CVE-2026-24515) and an integer overflow (CVE-2026-25210)
Summary Vulnerabilities in Python could cause a null pointer dereference CVE-2026-24515 or an integer overflow CVE-2026-25210. Python is used by AIX as part of Ansible node management automation. Vulnerability Details CVEID:CVE-2026-24515 DESCRIPTION: In libexpat before 2.7.4,...
Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services before 4.6.20 shipped with IBM Cloud Pak for Business Automation iFixes for January 2026.
Summary IBM Cloud Pak for Business Automation includes IBM Cloud Pak foundational services. IBM Cloud Pak for Business Automation January 2026 security fixes update this dependency to 4.6.20 to address security vulnerabilities. Vulnerability Details CVEID:CVE-2022-23990 DESCRIPTION: Expat aka...
SUSE CVE-2026-32778
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition...
SUSE CVE-2026-32777
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
EUVD-2026-12347
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content...
EUVD-2026-12351
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition...
ALPINE-CVE-2026-32778
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition...
CVE-2026-32776
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content...
CVE-2026-32777
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
AZL-79859 CVE-2026-32777 affecting package expat for versions less than 2.6.4-5
libexpat before 2.7.5 allows an infinite loop while parsing DTD content...
AZL-79856 CVE-2026-32778 affecting package expat for versions less than 2.6.4-5
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition...