EUVD-2026-38187

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...