Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vfgp-2986-rm7g

Опубликовано: 20 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412.

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412.

EPSS

Процентиль: 1%
0.00102
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 4.9
ubuntu
7 дней назад

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412.

CVSS3: 4.9
nvd
8 дней назад

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412.

msrc
6 дней назад

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412.

CVSS3: 4.9
debian
8 дней назад

libexpat before 2.8.4 lacks handler call depth tracking with custom en ...

EPSS

Процентиль: 1%
0.00102
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-416