1760 matches found
PT-2025-46018
lookup in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
PT-2025-46023
Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...
PT-2025-46015
addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
PT-2025-46027
In Expat aka libexpat before 2.4.5, there is an integer overflow in copyString...
PT-2025-46017
defineAttribute in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
PT-2025-46033
libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple buffer fills are needed...
PT-2025-46013
In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...
PT-2025-46031
libexpat through 2.5.0 allows recursive XML Entity Expansion if XML DTD is undefined at compile time...
PT-2025-46037
An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m groupSize on 32-bit platforms where UINT MAX equals SIZE MAX...
PT-2025-46024
xmltok impl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...
PT-2025-46012
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML GetCurrentLineNumber or XML GetCurrentColumnNumber then resulted in a heap-based buffer over-read...
ROS-20251008-08
The vulnerability of the libexpat XML file parsing library is related to the fact that the application does not control the internal resource consumption properly. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
EUVD-2019-6813
Malware in sbrugna...
EUVD-2017-18171
Malware in sbrugna...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2025-986163)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986163 advisory. libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. Tenable has extracted the preceding description block directly from the Unity Lin...
Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987431)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987431 advisory. buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Unity...
Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987433)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987433 advisory. defineAttribute in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Uni...
RockyLinux 9 : expat (RLSA-2025:7444)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7444 advisory. libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 Tenable has extracted the preceding description block directly from...
expat security update
An update is available for expat. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat...