libexpat vulnerabilities

Newest CVEs

• CVE-2026-124317

  libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16

  libexpat · libexpat

  Medium6.3
• CVE-2026-118370

  libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes

  libexpat · libexpat

  High8.2
• CVE-2026-117610

  libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser

  libexpat · libexpat

  High8.2
• CVE-2026-115506

  libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay

  libexpat · libexpat

  High8.7
• CVE-2026-113351

  libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset

  libexpat · libexpat

  High8.2
• CVE-2026-77214

  libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer

  libexpat · libexpat

  High8.3
• CVE-2026-102633

  libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc

  libexpat · libexpat

  High8.2
• CVE-2026-93990

  Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate

  libexpat · libexpat

  High8.7
• CVE-2026-76641

  Expat Out-of-Bounds Read via dtdCopy

  libexpat · libexpat

  High8.7