CVE-2021-45960

In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...

UBUNTU-CVE-2012-1148

Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service memory consumption via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities...

PT-2012-1122 · Expat +7 · Expat +7

Name of the Vulnerable Software and Affected Versions: expat versions prior to 2.1.0 Description: The issue is related to multiple vulnerabilities in the expat package, which can lead to a disruption of protected information availability. These vulnerabilities can be exploited remotely. A memory...