Medium USN-7145-1 1 CVE

expat vulnerability

Published Dec 10, 2024 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Expat did not properly handle its internal state
when attempting to resume an unstarted parser. An attacker could use this
issue to cause a denial of service (application crash).

Fixed packages 6

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	expat	2.2.9-1ubuntu0.8
Ubuntu · 22.04 LTS 22.04:LTS	expat	2.4.7-1ubuntu0.5
Ubuntu · 24.04 LTS 24.04:LTS	expat	2.6.1-2ubuntu0.2
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	expat	2.1.0-4ubuntu1.4+esm10
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	expat	2.1.0-7ubuntu0.16.04.5+esm10
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	expat	2.2.5-3ubuntu0.9+esm2

Vulnerabilities 1

Medium 5.9

CVE-2024-50602 Public exploit

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_Sto…

qt6-qtwebengine insighttoolkit4 expat matanza Debian Ubuntu Azure Linux Alpine Wolfi

Oct 27, 2024

References

report
https://ubuntu.com/security/CVE-2024-50602