JLSEC-2026-1234

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.

...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the resolveSystemId function. An attacker can cause unexpected behavior or potentially execute arbitrary code by providing specially crafted input that triggers an integer overflow during processing...

AZL-90252 CVE-2026-56410 affecting package expat for versions less than 2.8.2-1

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

EUVD-2026-38187

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

CVE-2026-56410: Integer Overflow or Wraparound

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...