Advisories · Technology
libexpat.
Every CVE that names libexpat among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes
- libexpat
- Memory corruption
- CVSS 8.2 High
libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser
- libexpat
- Memory corruption
- CVSS 8.7 High
libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay
- libexpat
- Denial of service
- CVSS 8.2 High
libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset
- libexpat
- CWE-909
- CVSS 8.3 High
libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer
- libexpat
- Memory corruption
- CVSS 8.2 High
libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc
- libexpat
- Memory corruption
- CVSS 8.7 High
Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate
- libexpat
- CWE-176
- CVSS 8.7 High
Expat Out-of-Bounds Read via dtdCopy
- libexpat
- Memory corruption
- CVSS 4.9 Medium
Use after free in libexpat
- libexpat
- Memory corruption
- CVSS 5.9 Medium
libexpat: In libexpat 2.8.2 and 2.8.3 before 2.8.4…
- libexpat
- CWE-394
- CVSS 8.7 High
Expat Denial of Service via storeAtts() Quadratic Complexity
- libexpat
- Denial of service
- CVSS 6.2 Medium
Out-of-bounds read in libexpat
- libexpat
- Memory corruption
- CVSS 4.9 Medium
Use after free in libexpat
- libexpat
- Memory corruption
- CVSS 6.9 Medium
Integer overflow in libexpat
- libexpat
- Memory corruption
- CVSS 6.9 Medium
Integer overflow in libexpat
- libexpat
- Memory corruption
- CVSS 6.5 Medium
Integer overflow in libexpat
- libexpat
- Memory corruption
- CVSS 6.9 Medium
Integer overflow in libexpat
- libexpat
- Memory corruption
- CVSS 6.9 Medium
Integer overflow in libexpat
- libexpat
- Memory corruption
- CVSS 6.9 Medium
Integer overflow in libexpat
- libexpat
- Memory corruption
- CVSS 6.9 Medium
Integer overflow in libexpat
- libexpat
- Memory corruption
- CVSS 6.9 Medium
Integer overflow in libexpat
- libexpat
- Memory corruption
- CVSS 6.9 Medium
Integer overflow in libexpat
- libexpat
- Memory corruption
- CVSS 6.9 Medium
libexpat: In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c…
- libexpat
- CWE-821
- CVSS 4.9 Medium
Use after free in libexpat
- libexpat
- Memory corruption
- CVSS 4.9 Medium
Use after free in libexpat
- libexpat
- Memory corruption
- CVSS 2.9 Low
Inefficient algorithmic complexity in libexpat
- libexpat
- Denial of service
- CVSS 2.9 Low
libexpat: libexpat before 2.8.0 uses insufficient entropy…
- libexpat
- CWE-331
- CVSS 2.9 Low
NULL pointer dereference in libexpat
- libexpat
- Memory corruption
- CVSS 4.0 Medium
Infinite loop in libexpat
- libexpat
- Denial of service
- CVSS 4.0 Medium
NULL pointer dereference in libexpat
- libexpat
- Memory corruption
- CVSS 6.9 Medium
Integer overflow in libexpat
- libexpat
- Memory corruption
- CVSS 2.9 Low
NULL pointer dereference in libexpat
- libexpat
- Memory corruption
- CVSS 2.9 Low
Inefficient algorithmic complexity in libexpat
- libexpat
- Denial of service
- CVSS 7.5 High
Resource allocation without limits in libexpat
- libexpat
- Denial of service