Libexpat CVE-2026-24515

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. Rated critical severity (CVSS 9.8),

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the p

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is

Denial of service in libexpat before 2.8.1 lets remote attackers exhaust CPU by submitting moderately sized crafted XML

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEnti

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too

expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetE

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a m

An issue was discovered in libexpat before 2.6.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exp

An issue was discovered in libexpat before 2.6.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exp

Denial of service in libexpat through 2.8.3 stems from quadratic CPU complexity in the storeAtts() XML attribute process

Out-of-bounds read in libexpat through 2.8.3 allows remote unauthenticated attackers to crash any application that parse