5.9Orta
CVE-2026-102633libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc
Açıklama
libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or denial of service.
Zayıflık türü (CWE):
CWE-190
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- Pull Request #1392 issue-trackingpatch
- Patch Commit patch
- https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/lib/xmlparse.c#L1003 technical-description
- https://github.com/libexpat/libexpat product
- VulnCheck Advisory: libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc third-party-advisory
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html