Package · Wolfi

expat

29 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

High 7.5

CVE-2024-8176 Public exploit

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi

Mar 14, 2025
Medium 5.9

CVE-2024-50602 Public exploit

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_Sto…

qt6-qtwebengine insighttoolkit4 expat matanza Debian Ubuntu Azure Linux Alpine Wolfi

Oct 27, 2024
Critical 9.8

CVE-2024-45490 Public exploit

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

qt6-qtwebengine qt5-qtwebengine insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi

Aug 30, 2024
High 7.5

CVE-2024-28757 Public exploit

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created vi…

insighttoolkit4 expat matanza vtk Debian Ubuntu Azure Linux Alpine Wolfi

Mar 10, 2024