Out-of-bounds read In expat
Description
libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or denial of service.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 2.5.0-1+deb12u5 | ||
debian 14 | 2.8.5-2 | ||
debian 13 | 2.9.0-1~deb13u1 | ||
 rpm rhel6 | - | - | |
rpm rhel10 | - | - | |
rpm rhel6 | - | - | |
rpm rhel7 | - | - | |
rpm rhel8 | - | - | |
rpm rhel9 | - | - | |
rpm rhel10 | - | - |
1-10 of 22
10
Aliases
1. 2. 3. 4. 5. 6. 7.