13 results · Feed
-
High 8.1CVE-2021-46143 Public exploit
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
-
Medium 6.5
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing to…
-
High 7.5
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the X…
-
Unscored —
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the …
-
Unscored —CVE-2016-4472 EPSS 12%
The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attack…
-
Unscored —
Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-…
-
Unscored —
The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attacke…
-
Unscored —CVE-2016-0718 EPSS 13%
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a …
-
Unscored —CVE-2015-1283 EPSS 18%
Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2…
-
Unscored —
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash …
-
Unscored —
Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers t…
-
Unscored —CVE-2009-3560 EPSS 24%
The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows co…
-
Unscored —CVE-2009-3720 EPSS 28%
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and …