Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v3cw-2f3g-f38x

Опубликовано: 04 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

EPSS

Процентиль: 21%
0.00288
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 4.9
ubuntu
2 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

CVSS3: 4.9
redhat
2 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

CVSS3: 4.9
nvd
2 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

CVSS3: 4.9
msrc
около 2 месяцев назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

CVSS3: 4.9
debian
2 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to X ...

EPSS

Процентиль: 21%
0.00288
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-416