CVE-2025-59375

Aliases:RHSA-2025:19403RHSA-2025:21030RHSA-2025:21773RHSA-2025:21974RHSA-2025:22175RHSA-2026:3407RHSA-2026:5396DEBIAN-CVE-2025-59375ALPINE-CVE-2025-59375CGA-4wvc-fr4c-67rmCGA-v3ff-4jx8-85mh
Advisory lineage Upstream: 0 Downstream: 51
Modified
Published: 15 Sept 2025, 00:00
Last modified:14 Jul 2026, 12:43

Vulnerability Summary

Overall Risk (default)
medium
40/100
CVSS Score
7.5 HIGH
v3.1 (cve.org)
EPSS Score
1.31% LOW
1% probability +1.15%
KEV
Not listed
Ransomware
No reports
Public exploits
2 found
Dark Web
Not detected

Timeline

15 Sept 2025, 00:00
Published
Vulnerability first disclosed
14 Jul 2026, 12:43
Last Modified
Vulnerability information updated

Description

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS Metrics

  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:T/RC:C
  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • v3.1•MEDIUM•Score: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS Trends

Current EPSS score: 1.31%• Percentile: 69%

Techniques & Countermeasures

  • CWE-770•Allocation of Resources Without Limits or Throttling

    The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Affected Systems

  • alpine•expat

    < 2.7.2-r0 | < 2.7.2-r0 | < 2.7.2-r0 | < 2.7.2-r0 | < 2.7.2-r0 | < 2.7.2-r0

  • chainguard•expat

    < 2.7.2-r0

  • wolfi•expat

    < 2.7.2-r0

  • debian•expat

    all | all | < 2.8.2-1~deb13u1 | < 2.7.2-1

  • debian•firefox-esr

    < 140.9.0esr-1~deb11u1 | < 140.9.0esr-1~deb12u1 | < 140.9.0esr-1~deb13u1 | < 140.9.0esr-1

  • debian•thunderbird

    < 1:140.9.0esr-1~deb11u1 | < 1:140.9.0esr-1~deb12u1 | < 1:140.9.0esr-1~deb13u1 | < 1:140.9.0esr-1

  • libexpat_project•libexpat

    < 2.7.2

  • redhat•expat

    < 0:2.7.1-1.el10_0.3 | < 0:2.7.1-1.el10_1.3 | < 0:2.5.0-5.el9_6.1 | < 0:2.5.0-5.el9_7.1 | < 0:2.7.5-1.hum1

  • redhat•expat-debuginfo

    < 0:2.7.1-1.el10_0.3 | < 0:2.7.1-1.el10_1.3 | < 0:2.5.0-5.el9_6.1 | < 0:2.5.0-5.el9_6.1 | < 0:2.5.0-5.el9_7.1 | < 0:2.5.0-5.el9_7.1

  • redhat•expat-debugsource

    < 0:2.7.1-1.el10_0.3 | < 0:2.7.1-1.el10_1.3 | < 0:2.5.0-5.el9_6.1 | < 0:2.5.0-5.el9_6.1 | < 0:2.5.0-5.el9_7.1 | < 0:2.5.0-5.el9_7.1

  • redhat•expat-devel

    < 0:2.7.1-1.el10_0.3 | < 0:2.7.1-1.el10_1.3 | < 0:2.5.0-5.el9_6.1 | < 0:2.5.0-5.el9_7.1

  • redhat•mingw-expat

    < 0:2.5.0-1.el8_10

  • redhat•mingw-fontconfig

    < 0:2.12.6-4.el8_10

  • redhat•mingw32-expat

    < 0:2.5.0-1.el8_10

  • redhat•mingw32-expat-debuginfo

    < 0:2.5.0-1.el8_10

  • redhat•mingw32-fontconfig

    < 0:2.12.6-4.el8_10

  • redhat•mingw32-fontconfig-debuginfo

    < 0:2.12.6-4.el8_10

  • redhat•mingw64-expat

    < 0:2.5.0-1.el8_10

  • redhat•mingw64-expat-debuginfo

    < 0:2.5.0-1.el8_10

  • redhat•mingw64-fontconfig

    < 0:2.12.6-4.el8_10

  • redhat•mingw64-fontconfig-debuginfo

    < 0:2.12.6-4.el8_10

References (34)