IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
6.5Medium

CVE-2026-56409

libexpat project libexpat; Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0); Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)… Published: (4 months ago)

Description

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.

Weakness (CWE): CWE-190

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
libexpat project libexpat < 2.8.2
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) V3.1.7
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) V3.1.7
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) V3.1.7
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) V3.1.7
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) V3.1.7

References and patches

CPE matches (NVD) (1)
  • cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:* < 2.8.2