CVE-2026-32776

Опубликовано: 16 мар. 2026

Источник: debian

Описание

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

Пакет	Статус	Версия исправления	Релиз	Тип
expat	fixed	2.7.5-1		package
expat	no-dsa		bookworm	package
expat	postponed		bullseye	package

https://github.com/libexpat/libexpat/pull/1158
Fixed by: https://github.com/libexpat/libexpat/commit/5be25657583ea91b09025c858b4785834c20f59c

CVE-2026-32776

CVSS3: 4

ubuntu

5 месяцев назад

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

CVE-2026-32776

CVSS3: 6.2

redhat

5 месяцев назад

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

CVE-2026-32776

CVSS3: 4

nvd

5 месяцев назад

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

CVE-2026-32776

CVSS3: 4

msrc

5 месяцев назад

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

GHSA-r8fp-cwhw-m8hh

CVSS3: 4

github

5 месяцев назад

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.