Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-56412

Опубликовано: 21 июн. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 4.9

Описание

libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-infra-legacy/trusty

not-affected

uses system expat
esm-infra-legacy/xenial

not-affected

uses system expat
esm-infra/bionic

not-affected

uses system expat
esm-infra/focal

not-affected

uses system expat
jammy

not-affected

uses system expat
noble

not-affected

uses system expat
questing

not-affected

uses system expat
resolute

not-affected

uses system expat
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-infra-legacy/trusty

not-affected

uses system expat
esm-infra-legacy/xenial

not-affected

uses system expat
esm-infra/bionic

not-affected

uses system expat
esm-infra/focal

not-affected

uses system expat
jammy

not-affected

uses system expat
noble

not-affected

uses system expat
questing

not-affected

uses system expat
resolute

not-affected

uses system expat
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

jammy

needs-triage

noble

needs-triage

questing

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-infra-legacy/xenial

not-affected

uses system expat
esm-infra/bionic

not-affected

uses system expat
esm-infra/focal

not-affected

uses system expat
jammy

not-affected

uses system expat
noble

not-affected

uses system expat
questing

not-affected

uses system expat
resolute

not-affected

uses system expat
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/resolute

not-affected

uses system expat
esm-infra-legacy/trusty

needs-triage

jammy

not-affected

uses system expat
noble

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

questing

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present
questing

not-affected

code not present
resolute

not-affected

code not present
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

not-affected

uses system expat
esm-apps/jammy

not-affected

uses system expat
esm-apps/noble

not-affected

uses system expat
esm-apps/resolute

not-affected

uses system expat
esm-infra-legacy/trusty

not-affected

uses system expat
jammy

not-affected

uses system expat
noble

not-affected

uses system expat

Показывать по

РелизСтатусПримечание
devel

not-affected

uses system expat
esm-infra-legacy/xenial

not-affected

uses system expat
esm-infra/bionic

not-affected

uses system expat
esm-infra/focal

not-affected

uses system expat
jammy

not-affected

uses system expat
noble

not-affected

uses system expat
questing

not-affected

uses system expat
resolute

not-affected

uses system expat
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

jammy

needs-triage

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

jammy

needs-triage

noble

needs-triage

questing

DNE

resolute

DNE

Показывать по

РелизСтатусПримечание
devel

ignored

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

esm-apps/resolute

ignored

jammy

ignored

noble

ignored

questing

ignored

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

jammy

needs-triage

noble

needs-triage

questing

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

jammy

needs-triage

noble

needs-triage

questing

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

code-not-compiled
esm-apps/resolute

not-affected

code-not-compiled
esm-infra-legacy/xenial

not-affected

code-not-compiled
esm-infra/bionic

not-affected

code-not-compiled
esm-infra/focal

not-affected

code-not-compiled
jammy

not-affected

code-not-compiled
noble

not-affected

code-not-compiled
questing

not-affected

code-not-compiled
resolute

not-affected

code-not-compiled
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

code not present
jammy

not-affected

uses system expat
noble

not-affected

code not present
questing

not-affected

code not present
resolute

not-affected

code not present
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-infra-legacy/trusty

needs-triage

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-infra-legacy/trusty

needs-triage

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

jammy

needs-triage

noble

needs-triage

questing

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-infra-legacy/trusty

needs-triage

jammy

needs-triage

noble

needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 4%
0.00138
Низкий

4.9 Medium

CVSS3

Связанные уязвимости

redhat логотип

CVE-2026-56412

CVSS3: 4.9
redhat
около 1 месяца назад

libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.

nvd логотип

CVE-2026-56412

CVSS3: 4.9
nvd
около 1 месяца назад

libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.

msrc логотип

CVE-2026-56412

msrc
около 1 месяца назад

libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.

debian логотип

CVE-2026-56412

CVSS3: 4.9
debian
около 1 месяца назад

libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataS ...

github логотип

GHSA-m2mm-5w64-p8p7

CVSS3: 4.9
github
около 1 месяца назад

libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.

EPSS

Процентиль: 4%
0.00138
Низкий

4.9 Medium

CVSS3