Package · Ubuntu

vtk

71 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

High 7.5

CVE-2024-8176 Public exploit

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Alpine

Mar 14, 2025
Medium 5.9

CVE-2024-50602 Public exploit

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_Sto…

qt6-qtwebengine insighttoolkit4 expat swish-e Debian Ubuntu Alpine

Oct 27, 2024
Critical 9.8

CVE-2024-45490 Public exploit

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

qt6-qtwebengine qt5-qtwebengine insighttoolkit4 expat Debian Ubuntu Alpine

Aug 30, 2024
High 7.5

CVE-2024-28757 Public exploit

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created vi…

insighttoolkit4 expat swish-e matanza Debian Ubuntu Alpine

Mar 10, 2024
High 7.5

CVE-2022-43680 Public exploit

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEnt…

thunderbird insighttoolkit4 expat swish-e Debian Ubuntu Alpine

Oct 24, 2022
High 7.5

CVE-2022-25314 Public exploit

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Alpine

Feb 18, 2022
Critical 9.8

CVE-2022-25315 Public exploit

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Alpine

Feb 18, 2022
Medium 6.5

CVE-2022-25313 Public exploit

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth…

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Alpine

Feb 18, 2022
Critical 9.8

CVE-2022-23852 Public exploit

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML…

thunderbird firefox qt5-qtwebengine insighttoolkit4 Debian Ubuntu Alpine

Jan 24, 2022
Critical 9.8

CVE-2022-22822 Public exploit

addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Alpine

Jan 8, 2022
High 8.1

CVE-2021-46143 Public exploit

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

firefox insighttoolkit4 qtwebengine-opensource-src expat Debian Ubuntu Alpine

Jan 6, 2022
High 8.8

CVE-2021-45960 Public exploit

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can l…

firefox insighttoolkit4 expat matanza Debian Ubuntu Alpine

Jan 1, 2022