15 matches found
CVE-2026-56131
A use-after-free vulnerability in libexpat occurs because handler call depth isn't properly tracked when XMLResumeParser is invoked during policy violations. This flaw can lead to information disclosure, data corruption, or denial of service. Mitigation To mitigate this vulnerability, avoid...
libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking
A use-after-free vulnerability in libexpat occurs because handler call depth isn't properly tracked when XMLResumeParser is invoked during policy violations. This flaw can lead to information disclosure, data corruption, or denial of service...
OESA-2026-2857 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a poli...
ALPINE-CVE-2026-56131
libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...
CVE-2026-56131
libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.0.1)
The version of AHV installed on the remote host is prior to 10.0.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.0.1 advisory. - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response...
Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1213)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: thunderbird
Issue Overview: There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression i.e. if using JxlEncoderAddJPEGFrame on untrusted input does not properly check bounds i...
Security update for expat
This update for expat fixes the following issues: CVE-2024-50602: Fixed possible denial-of-service vulnerability inside XMLResumeParser bsc1232579. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...
SUSE-SU-2025:20086-1 Security update for expat
This update for expat fixes the following issues: - CVE-2024-50602: Fixed possible denial-of-service vulnerability inside XMLResumeParser bsc1232579...
Security update for mozjs78
This update for mozjs78 fixes the following issues: CVE-2024-50602: Fixed DoS via XMLResumeParser bsc1232599 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for you...
SUSE-SU-2024:4412-1 Security update for mozjs78
This update for mozjs78 fixes the following issues: - CVE-2024-50602: Fixed DoS via XMLResumeParser bsc1232599...
CLSA-2024-1732197848 expat: Fix of CVE-2024-50602
CVE-2024-50602: Fix crash in XMLResumeParser function by preventing XMLStopParser from stopping/suspending unstarted parser...
AZL-51735 CVE-2024-50602 affecting package expat for versions less than 2.6.3-2
An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser can stop/suspend an unstarted parser...