1760 matches found
MGASA-2025-0240 Updated expat packages fix security vulnerabilities
Improper restriction of xml entity expansion depth in libexpat. CVE-2024-8176 This is an extension of the fix published in MGASA-2025-0109 that was determined by upstream to be incomplete. Libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small...
Updated expat packages fix security vulnerabilities
Improper restriction of xml entity expansion depth in libexpat. CVE-2024-8176 This is an extension of the fix published in MGASA-2025-0109 that was determined by upstream to be incomplete. Libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small...
OESA-2025-2454 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat in Expat before version 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document...
PT-2025-46038
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML ResumeParser function because XML StopParser can stop/suspend an unstarted parser...
Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
Libexpat contains a denial-of-service DoS vulnerability. A remote attacker could exploit this by chaining together an excessive number of general entities. Malicious use of this linear entity chain would subsequently result in uncontrolled recursion, leading to a stack overflow and crash...
JLSEC-2025-63 An issue was discovered in libexpat before 2.6.3
An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms where UINTMAX equals SIZEMAX...
JLSEC-2025-64 An issue was discovered in libexpat before 2.6.3
An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms where UINTMAX equals SIZEMAX...
JLSEC-2025-58 In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD...
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...
JLSEC-2025-59 libexpat through 2.5.0 allows recursive XML Entity Expansion if `XML_DTD` is undefined at compile...
libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...
JLSEC-2025-60 libexpat through 2.5.0 allows a denial of service (resource consumption) because many full...
libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple buffer fills are needed...
JLSEC-2025-61 libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external...
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XMLExternalEntityParserCreate...
JLSEC-2025-42 In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function...
In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...
PT-2025-46036
An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms where UINT MAX equals SIZE MAX...
PT-2025-46026
In Expat aka libexpat before 2.4.5, an attacker can trigger stack exhaustion in build model via a large nesting depth in the DTD element...
PT-2025-46030
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML ExternalEntityParserCreate in out-of-memory situations...
PT-2025-46034
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XML ExternalEntityParserCreate...
PT-2025-46025
xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...
PT-2025-46028
In Expat aka libexpat before 2.4.5, there is an integer overflow in storeRawNames...