Improper resource allocation - Buffer overflow In expat
Description
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.15 | 2.4.3-r0 | ||
 debian 14 | 2.4.3-1 | ||
debian 12 | - | ||
alpine v3.16 | 2.4.3-r0 | ||
alpine v3.12 | 2.2.10-r0 | ||
alpine v3.14 | 2.4.3-r0 | ||
alpine v3.18 | 2.4.3-r0 | ||
alpine v3.19 | 2.4.3-r0 | ||
alpine v3.20 | 2.4.3-r0 | ||
alpine v3.21 | 2.4.3-r0 |
1-10 of 33
10
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1.