5.9Mittel
CVE-2026-113351libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset
Beschreibung
libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated.
Schwachstellentyp (CWE):
CWE-909
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://github.com/libexpat/libexpat/pull/1431 patchissue-trackingPatch
- https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884 technical-descriptionProduct
- https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560 technical-descriptionProduct
- https://github.com/libexpat/libexpat productProduct
- VulnCheck Advisory: libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset third-party-advisoryPatchThird Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*≥ 2.7.2 ≤ 2.9.0