Výsledky hledání

Sanata vulnerabilità in libexpat

Aggiornamenti di sicurezza sanano una vulnerabilità in libexpat, nota libreria scritta in C per l'analisi di documenti XML. Tale vulnerabilità, qualora sfruttata, consentirebbe ad utente malintenzionato di innescare la corruzione della memoria o il crash dell'applicazione, portando alla compromissione della disponibilità del servizio sulle istanze interessate.

EPSS 0.00 CVE-2026-76641 libexpat IT

tg: zranitelnost

1. 9. 10:40 · CSIRT Itálie (ACN) · Sanata vulnerabilità in libexpat

CVE-2026-72522 libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.

Information published.

EPSS 0.00 CVE-2026-72522 libexpat US

11. 8. 10:08 · Microsoft Security · CVE-2026-72522 libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.

CVE-2026-56403 libexpat before 2.8.2 has an integer overflow in storeAtts.

Information published.

EPSS 0.00 CVE-2026-56403 libexpat US

27. 6. 10:06 · Microsoft Security · CVE-2026-56403 libexpat before 2.8.2 has an integer overflow in storeAtts.

CVE-2026-56406 libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

Information published.

EPSS 0.00 CVE-2026-56406 libexpat US

27. 6. 10:05 · Microsoft Security · CVE-2026-56406 libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

CVE-2026-56405 libexpat before 2.8.2 has an integer overflow in getAttributeId.

Information published.

EPSS 0.00 CVE-2026-56405 libexpat US

27. 6. 10:04 · Microsoft Security · CVE-2026-56405 libexpat before 2.8.2 has an integer overflow in getAttributeId.

CVE-2026-50219 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

Information published.

EPSS 0.00 CVE-2026-50219 libexpat US

5. 6. 10:02 · Microsoft Security · CVE-2026-50219 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

CVE-2026-56412 libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.

Information published.

EPSS 0.00 CVE-2026-50219 CVE-2026-56412 libexpat US

5. 6. 10:02 · Microsoft Security · CVE-2026-56412 libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.

CVE-2026-56131 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

Information published.

EPSS 0.00 CVE-2026-50219 CVE-2026-56131 libexpat US

5. 6. 10:02 · Microsoft Security · CVE-2026-56131 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

CVE-2026-45186 In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

Information published.

EPSS 0.00 CVE-2026-45186 libexpat US

11. 5. 10:03 · Microsoft Security · CVE-2026-45186 In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

CVE-2026-41080 libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

Information published.

EPSS 0.00 CVE-2026-41080 libexpat US

18. 4. 10:01 · Microsoft Security · CVE-2026-41080 libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.