Libexpat EUVD-2026-23276

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. Rated critical severity (CVSS 9.8),

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the p

Denial of service in libexpat before 2.8.1 lets remote attackers exhaust CPU by submitting moderately sized crafted XML

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEnti

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too

expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetE

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a m

An issue was discovered in libexpat before 2.6.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exp

An issue was discovered in libexpat before 2.6.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exp

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attacke

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. Rated high severity (CVSS 8.1), this

The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attacker