Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-25210

Опубликовано: 30 янв. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.8

Описание

In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-infra-legacy/trusty

not-affected

uses system expat
esm-infra-legacy/xenial

not-affected

uses system expat
esm-infra/bionic

not-affected

uses system expat
esm-infra/focal

not-affected

uses system expat
esm-infra/xenial

not-affected

uses system expat
jammy

not-affected

uses system expat
noble

not-affected

uses system expat
questing

not-affected

uses system expat
resolute

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-infra-legacy/trusty

not-affected

uses system expat
esm-infra-legacy/xenial

not-affected

uses system expat
esm-infra/bionic

not-affected

uses system expat
esm-infra/focal

not-affected

uses system expat
esm-infra/xenial

not-affected

uses system expat
jammy

not-affected

uses system expat
noble

not-affected

uses system expat
questing

not-affected

uses system expat
resolute

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

not-affected

code not vulnerable - bot
esm-apps/resolute

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

needs-triage

noble

not-affected

code not vulnerable - bot

Показывать по

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-infra-legacy/xenial

not-affected

uses system expat
esm-infra/bionic

not-affected

uses system expat
esm-infra/focal

not-affected

uses system expat
esm-infra/xenial

not-affected

uses system expat
jammy

not-affected

uses system expat
noble

not-affected

uses system expat
questing

not-affected

uses system expat
resolute

not-affected

uses system expat
stonking

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/resolute

not-affected

uses system expat
esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

needs-triage

jammy

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
devel

not-affected

2.7.4-1
esm-infra-legacy/trusty

released

2.1.0-4ubuntu1.4+esm11
esm-infra-legacy/xenial

released

2.1.0-7ubuntu0.16.04.5+esm11
esm-infra/bionic

released

2.2.5-3ubuntu0.9+esm3
esm-infra/focal

released

2.2.9-1ubuntu0.8+esm1
esm-infra/xenial

released

2.1.0-7ubuntu0.16.04.5+esm11
jammy

released

2.4.7-1ubuntu0.7
noble

released

2.6.1-2ubuntu0.4
questing

released

2.7.1-2ubuntu0.2
resolute

not-affected

2.7.4-1

Показывать по

РелизСтатусПримечание
devel

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present
questing

not-affected

code not present
resolute

not-affected

code not present
stonking

not-affected

code not present
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/resolute

not-affected

uses system expat
esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

not-affected

uses system expat
jammy

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-infra-legacy/xenial

not-affected

uses system expat
esm-infra/bionic

not-affected

uses system expat
esm-infra/focal

not-affected

uses system expat
esm-infra/xenial

not-affected

uses system expat
jammy

not-affected

uses system expat
noble

not-affected

uses system expat
questing

not-affected

uses system expat
resolute

not-affected

uses system expat
stonking

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

needs-triage

noble

DNE

questing

DNE

resolute

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

released

1.2-3ubuntu0.16.04.1~esm5
esm-apps/bionic

released

1.2-4ubuntu0.18.04.1~esm6
esm-apps/focal

released

1.2-4ubuntu0.20.04.1~esm6
esm-apps/jammy

released

1.2-4ubuntu0.22.04.1~esm6
esm-apps/noble

released

1.2-4.1ubuntu2.24.0.4.1+esm4
esm-apps/xenial

released

1.2-3ubuntu0.16.04.1~esm5
jammy

needed

noble

needed

questing

DNE

Показывать по

РелизСтатусПримечание
devel

ignored

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

esm-apps/resolute

ignored

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

ignored

noble

ignored

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

needs-triage

noble

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

needs-triage

noble

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

code-not-compiled
esm-apps/resolute

not-affected

code-not-compiled
esm-infra-legacy/xenial

not-affected

code-not-compiled
esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
esm-infra/xenial

not-affected

code-not-compiled
jammy

not-affected

code-not-compiled
noble

not-affected

code-not-compiled
questing

not-affected

code-not-compiled
resolute

not-affected

code-not-compiled

Показывать по

РелизСтатусПримечание
devel

not-affected

code not present
jammy

not-affected

uses system expat
noble

not-affected

code not present
questing

not-affected

code not present
resolute

not-affected

code not present
stonking

not-affected

code not present
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

needs-triage

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

needs-triage

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

not-affected

code not vulnerable - bot
esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

not-affected

code not vulnerable - bot
noble

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

needs-triage

jammy

needs-triage

Показывать по

EPSS

Процентиль: 11%
0.00211
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 6.9
redhat
10 месяцев назад

In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.

CVSS3: 7.8
nvd
10 месяцев назад

In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.

CVSS3: 7.8
debian
10 месяцев назад

In libexpat before 2.7.4, the doContent function does not properly det ...

CVSS3: 7.8
redos
8 месяцев назад

Уязвимость expat

CVSS3: 6.9
github
10 месяцев назад

In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.

EPSS

Процентиль: 11%
0.00211
Низкий

7.8 High

CVSS3