Most recent entries from all

BELL-CVE-2026-56407

2026-10-02T16:30:54.007379+00:00

Affected: Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat

EUVD-2026-328944

2026-10-02T16:30:54.007439+00:00

EUVD-2026-328944

fkie_cve-2026-56407

2026-10-02T16:30:54.007455+00:00

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

GHSA-r8qx-5vfx-8w6r

2026-10-02T16:30:54.007478+00:00

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

msrc_CVE-2026-56407 — libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

2026-10-02T16:30:54.007509+00:00

msrc_CVE-2026-56407

OESA-2026-2973 — expat security update

2026-10-02T16:30:54.007538+00:00

Affected: openEuler:20.03-LTS-SP4: expat

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fix(es):

libexpat before 2.8.2 has an integer overflow in storeAtts.(CVE-2026-56403)

libexpat before 2.8.2 has an integer overflow in addBinding.(CVE-2026-56404)

libexpat before 2.8.2 has an integer overflow in getAttributeId.(CVE-2026-56405)

libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.(CVE-2026-56406)

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.(CVE-2026-56407)

libexpat before 2.8.2 has an integer overflow in copyString.(CVE-2026-56408)

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.(CVE-2026-56409)

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.(CVE-2026-56410)

xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.(CVE-2026-56411)

libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.(CVE-2026-56412)

openSUSE-SU-2026:11584-1 — expat-2.8.2-1.1 on GA media

2026-10-02T16:30:54.007600+00:00

expat-2.8.2-1.1 on GA media

RHSA-2026:40486 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

2026-10-02T16:30:54.007623+00:00

libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding libexpat: libexpat: Arbitrary code execution due to integer overflow

SUSE-SU-2026:23894-1 — Security update for expat

2026-10-02T16:30:54.007642+00:00

Security update for expat

UBUNTU-CVE-2026-56407

2026-10-02T16:30:54.007664+00:00

Affected: Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: expat, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: expat, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3 and 64 more

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

WID-SEC-W-2026-2025 — libexpat: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

2026-10-02T16:30:54.007806+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in libexpat ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, darunter möglicherweise die Ausführung von beliebigem Code, die Manipulation von Daten, die Umgehung von Sicherheitsmaßnahmen, die Offenlegung vertraulicher Informationen oder die Herbeiführung eines Denial-of-Service-Zustands.