expat

6 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-45490 Public exploit

  An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

  qt6-qtwebengine qt5-qtwebengine insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi
  Aug 30, 2024
• Critical 9.8
  CVE-2022-25315 Public exploit

  In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022
• Critical 9.8
  CVE-2022-25235 Public exploit

  xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a U…

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 16, 2022
• Critical 9.8
  CVE-2022-25236 Public exploit EPSS 35%

  xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespac…

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 16, 2022
• Critical 9.8
  CVE-2022-23852 Public exploit

  Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML…

  thunderbird firefox qt5-qtwebengine insighttoolkit4 Debian Ubuntu Azure Linux Alpine
  Jan 24, 2022
• Critical 9.8
  CVE-2022-22822 Public exploit

  addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022