https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:19:23.198083+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-15903 UBUNTU-CVE-2019-15903 2026-10-07T09:19:23.199567+00:00

Affected: Ubuntu:Pro:14.04:LTS: expat, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:16.04:LTS: chromium-browser, Ubuntu:16.04:LTS: expat, Ubuntu:16.04:LTS: firefox, Ubuntu:16.04:LTS: thunderbird, Ubuntu:Pro:16.04:LTS: libxmltok and 67 more

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.