Skip to content
OpenAdvisories

Package · Azure Linux

ogdi

8 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate

    Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences to be accepted. Attackers can supply UTF-16 encoded XML containing lone high surrogates that consume the following c…