4.0
Medium
CVE-2026-32776 libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content
Description
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → < 3.1.6 | 3.1.6 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.5 → < 3.1.6 | 3.1.6 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → < 3.1.6 | 3.1.6 |
| libexpat 2.7 | earliest → < 2.7.5 | 2.7.5 |
References
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
The 1132 CVEs of SIMATIC S7-1500 CPU 1518-4 PN/DP MFP →
CVE-2026-63357
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before…
6.1
Medium
CVE-2026-63356
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including…
6.1
Medium
CVE-2026-63355
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in…
6.1
Medium
CVE-2026-63354
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…
9.6
Critical