Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fchf-wvcc-qf9g

Опубликовано: 19 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

EPSS

Процентиль: 3%
0.00135
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 4.9
ubuntu
около 1 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

CVSS3: 4.9
nvd
около 1 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

CVSS3: 4.9
msrc
около 1 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

CVSS3: 4.9
debian
около 1 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to X ...

EPSS

Процентиль: 3%
0.00135
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-416