Описание
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.
EPSS
Процентиль: 0%
0.00006
Низкий
6.9 Medium
CVSS3
Дефекты
CWE-190
Связанные уязвимости
CVSS3: 6.9
ubuntu
9 дней назад
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.
CVSS3: 6.9
debian
9 дней назад
In libexpat before 2.7.4, the doContent function does not properly det ...
CVSS3: 6.9
github
9 дней назад
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.
EPSS
Процентиль: 0%
0.00006
Низкий
6.9 Medium
CVSS3
Дефекты
CWE-190