Expat development team Expat numeric error vulnerability

The Expat development team identified a numerical error vulnerability in Expat versions 2.9.0 and earlier. This vulnerability stems from an unsigned integer overflow in the storeAtts function within lib/xmlparse.c. Attackers can exploit this by using excessively large attribute counts to trigger...