Package · Ubuntu

libxmltok

54 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Critical 9.8

CVE-2024-45490 Public exploit

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

qt6-qtwebengine qt5-qtwebengine insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi

Aug 30, 2024
Critical 9.8

CVE-2022-25235 Public exploit

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a U…

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine

Feb 16, 2022
Critical 9.8

CVE-2022-25236 Public exploit EPSS 35%

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespac…

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine

Feb 16, 2022
Critical 9.8

CVE-2022-22822 Public exploit

addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine

Jan 8, 2022