Libexpat Project Libexpat vulnerabilities, page 4
65 vulnerabilities
Known vulnerabilities in Libexpat Project Libexpat, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-32776alpineexpat+20
EPSS score0.17%
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.CVE-2026-72522debianexpat+20EPSS score0.19%
libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.CVE-2026-50219alpineexpat+26EPSS score0.18%
libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,CVE-2023-52426alpineexpat+15EPSS score0.39%
libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.CVE-2023-52425alpineexpat+51EPSS score2.15%
libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.