CVE-2026-32778

Опубликовано: 16 мар. 2026

Источник: nvd

CVSS3: 2.9

CVSS3: 5.5

EPSS Низкий

Описание

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.

Ссылки

https://github.com/libexpat/libexpat/pull/1159
Issue Tracking
Patch
https://github.com/libexpat/libexpat/pull/1163
Issue Tracking
Patch
https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*

Версия до 2.7.5 (исключая)

EPSS

Процентиль: 7%

0.00171

Низкий

2.9 Low

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2026-32778

CVSS3: 2.9

ubuntu

5 месяцев назад

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.

CVE-2026-32778

CVSS3: 5.1

redhat

5 месяцев назад

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.

CVE-2026-32778

CVSS3: 2.9

msrc

5 месяцев назад

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.

CVE-2026-32778

CVSS3: 2.9

debian

5 месяцев назад

libexpat before 2.7.5 allows a NULL pointer dereference in the functio ...

GHSA-hx82-g397-5ggr

CVSS3: 2.9

github

5 месяцев назад

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.

EPSS

Процентиль: 7%

0.00171

Низкий

2.9 Low

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-476