Skip to content
OpenAdvisories
Medium WID-SEC-2026-4214 2 CVEs

expat: Mehrere Schwachstellen ermöglichen Denial of Service

Published Oct 27, 2026 · Updated Nov 1, 2026 · Revision 2 · de-DE

Vendor: Red Hat Product: Enterprise Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in expat ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Expat ist ein XML Parser, der in der Programmiersprache-C geschrieben ist.

Vulnerabilities 2

  • Medium 5.9
    CVE-2026-117610

    libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser

    libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream chunking can force an empty non-final first pars…

    libexpat project libexpat insighttoolkit4 cmake Debian Ubuntu Azure Linux Alpine
  • Medium 5.9
    CVE-2026-118370

    libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes

    libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start tag carr…

    libexpat project libexpat insighttoolkit4 cmake Debian Ubuntu Azure Linux Alpine

Revision history

  1. #2

    Neue Updates von Red Hat aufgenommen

  2. #1

    Initiale Fassung

References