GHSA-r8qx-5vfx-8w6r

Опубликовано: 21 июн. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 6.9

Описание

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

Ссылки

EPSS

Процентиль: 4%

0.00139

Низкий

6.9 Medium

CVSS3

CVE ID

CVE-2026-56407

Дефекты

CWE-190

Связанные уязвимости

CVE-2026-56407

CVSS3: 6.9

ubuntu

3 месяца назад

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

CVE-2026-56407

CVSS3: 6.9

redhat

3 месяца назад

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

CVE-2026-56407

CVSS3: 6.9

nvd

3 месяца назад

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

CVE-2026-56407

CVSS3: 6.9

msrc

3 месяца назад

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

CVE-2026-56407

CVSS3: 6.9

debian

3 месяца назад

libexpat before 2.8.2 has an integer overflow in doProlog that is rela ...

EPSS

Процентиль: 4%

0.00139

Низкий

6.9 Medium

CVSS3

CVE ID

CVE-2026-56407

Дефекты

CWE-190