Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-56132

Опубликовано: 19 июн. 2026
Источник: nvd
CVSS3: 6.9
EPSS Низкий

Описание

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*
Версия до 2.8.2 (исключая)

EPSS

Процентиль: 1%
0.00107
Низкий

6.9 Medium

CVSS3

Дефекты

CWE-821

Связанные уязвимости

CVSS3: 6.9
ubuntu
около 1 месяца назад

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

CVSS3: 6.9
redhat
около 1 месяца назад

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

CVSS3: 6.9
msrc
около 1 месяца назад

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

CVSS3: 6.9
debian
около 1 месяца назад

In libexpat before 2.8.2, there is a heap-based buffer overflow in doP ...

CVSS3: 6.9
github
около 1 месяца назад

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

EPSS

Процентиль: 1%
0.00107
Низкий

6.9 Medium

CVSS3

Дефекты

CWE-821