Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fchf-wvcc-qf9g

Опубликовано: 19 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

EPSS

Процентиль: 7%
0.00175
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 4.9
ubuntu
3 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

CVSS3: 4.5
redhat
3 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

CVSS3: 4.9
nvd
3 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

CVSS3: 4.9
msrc
3 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

CVSS3: 4.9
debian
3 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to X ...

EPSS

Процентиль: 7%
0.00175
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-416