https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:45:58.727286+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2012-1148 CVE-2012-1148 2026-10-04T11:45:58.783849+00:00

Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.

 https://cve.radiocsirt.org/vuln/usn-5455-1 USN-5455-1 — libxmltok vulnerabilities 2026-10-04T11:45:58.783909+00:00

Affected: Ubuntu:Pro:16.04:LTS: libxmltok, Ubuntu:Pro:18.04:LTS: libxmltok, Ubuntu:Pro:20.04:LTS: libxmltok, Ubuntu:Pro:22.04:LTS: libxmltok

Tim Boddy, Gustavo Grieco and others discovered that Expat, that is integrated in xmltok library, incorrectly handled certain files. An attacker could possibly use these issues to cause a denial of service, or possibly execute arbitrary code. These issues were only addressed in Ubuntu 16.04 ESM. (CVE-2012-1148, CVE-2015-1283, CVE-2016-0718, CVE-2016-4472, CVE-2018-20843, CVE-2019-15903, CVE-2021-46143, CVE-2022-22822, CVE-2022-22823, CVE-2022-22824, CVE-2022-22825, CVE-2022-22826, CVE-2022-22827)

It was discovered that Expat, that is integrated in xmltok library, incorrectly handled encoding validation of certain files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2022-25235)

It was discovered that Expat, that is integrated in xmltok library, incorrectly handled namespace URIs of certain files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2022-25236)