CVE-2026-56406 libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse

Description

libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
libexpat 2.8	premières → < 2.8.2	2.8.2

Autres CVE de libexpat

Les 26 CVE de libexpat →

CVE-2026-76957 libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks 4.9 Moyenne CVE-2026-76956 In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy,… 5.9 Moyenne CVE-2026-66046 Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the… 8.7 Élevée CVE-2026-72522 libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the… 6.2 Moyenne