CVE-2026-50219

Опубликовано: 04 июн. 2026

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS3: 4.9

Описание

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/trusty	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/trusty	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
jammy	needs-triage
noble	needs-triage
questing	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/resolute	not-affected	uses system expat
esm-infra-legacy/trusty	needs-triage
jammy	not-affected	uses system expat
noble	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-infra-legacy/trusty	needs-triage
esm-infra-legacy/xenial	needs-triage
esm-infra/bionic	needs-triage
esm-infra/focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	needs-triage
resolute	needs-triage
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code not present
jammy	not-affected	code not present
noble	not-affected	code not present
questing	not-affected	code not present
resolute	not-affected	code not present
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	not-affected	uses system expat
esm-apps/jammy	not-affected	uses system expat
esm-apps/noble	not-affected	uses system expat
esm-apps/resolute	not-affected	uses system expat
esm-infra-legacy/trusty	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat

Показывать по

Релиз	Статус	Примечание
devel	not-affected	uses system expat
esm-infra-legacy/xenial	not-affected	uses system expat
esm-infra/bionic	not-affected	uses system expat
esm-infra/focal	not-affected	uses system expat
jammy	not-affected	uses system expat
noble	not-affected	uses system expat
questing	not-affected	uses system expat
resolute	not-affected	uses system expat
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
jammy	needs-triage
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
jammy	needs-triage
noble	needs-triage
questing	DNE
resolute	DNE

Показывать по

Релиз	Статус	Примечание
devel	ignored
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	ignored
esm-apps/jammy	ignored
esm-apps/noble	ignored
esm-apps/resolute	ignored
jammy	ignored
noble	ignored
questing	ignored

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
jammy	needs-triage
noble	needs-triage
questing	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
jammy	needs-triage
noble	needs-triage
questing	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code-not-compiled
esm-apps/resolute	not-affected	code-not-compiled
esm-infra-legacy/xenial	not-affected	code-not-compiled
esm-infra/bionic	not-affected	code-not-compiled
esm-infra/focal	not-affected	code-not-compiled
jammy	not-affected	code-not-compiled
noble	not-affected	code-not-compiled
questing	not-affected	code-not-compiled
resolute	not-affected	code-not-compiled
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	not-affected	code not present
jammy	not-affected	uses system expat
noble	not-affected	code not present
questing	not-affected	code not present
resolute	not-affected	code not present
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	DNE
esm-apps-legacy/xenial	needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	DNE
noble	DNE
questing	DNE
resolute	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
jammy	needs-triage
noble	needs-triage
questing	needs-triage

Показывать по

Релиз	Статус	Примечание
devel	needs-triage
esm-apps-legacy/xenial	needs-triage
esm-apps/bionic	needs-triage
esm-apps/focal	needs-triage
esm-apps/jammy	needs-triage
esm-apps/noble	needs-triage
esm-apps/resolute	needs-triage
esm-infra-legacy/trusty	needs-triage
jammy	needs-triage
noble	needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 21%

0.00288

Низкий

4.9 Medium

CVSS3

Связанные уязвимости

CVE-2026-50219

CVSS3: 4.9

redhat

2 месяца назад

CVE-2026-50219

CVSS3: 4.9

nvd

2 месяца назад

CVE-2026-50219

CVSS3: 4.9

msrc

около 2 месяцев назад

CVE-2026-50219

CVSS3: 4.9

debian

2 месяца назад

libexpat before 2.8.2 lacks handler call depth tracking for calls to X ...

GHSA-v3cw-2f3g-f38x

CVSS3: 4.9

github

2 месяца назад

EPSS

Процентиль: 21%

0.00288

Низкий

4.9 Medium

CVSS3

CVE-2026-50219

Описание

Пакет apache2

Пакет apr-util

Пакет ayttm

Пакет cableswig

Пакет cadaver

Пакет cmake

Пакет coin3

Пакет expat

Пакет firefox

Пакет gdcm

Пакет ghostscript

Пакет insighttoolkit4

Пакет libxmltok

Пакет matanza

Пакет smart

Пакет swish-e

Пакет tdom

Пакет texlive-bin

Пакет thunderbird

Пакет vnc4

Пакет vtk

Пакет wbxml2

Пакет xmlrpc-c

Ссылки на источники

Связанные уязвимости