mingw-expat vulnerabilities (Red Hat)

9 vulnerabilities.

• mingw-expat Red Hat libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a... CVE-2025-59375 Fix available 7.5 HighSeptember 15, 2025
• mingw-expat Red Hat libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Fix available 8.1 HighSeptember 14, 2022
• mingw-expat Red Hat In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. CVE-2022-25314 Public exploitFix available 7.5 HighFebruary 18, 2022
• mingw-expat Red Hat In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. CVE-2022-25315 Public exploitFix available 9.8 CriticalFebruary 18, 2022
• mingw-expat Red Hat In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via... CVE-2022-25313 Public exploitFix available 6.5 MediumFebruary 18, 2022
• mingw-expat Red Hat xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator... CVE-2022-25236 Public exploitFix available EPSS 35.3% 9.8 CriticalFebruary 15, 2022
• mingw-expat Red Hat xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as... CVE-2022-25235 Public exploitFix available 9.8 CriticalFebruary 15, 2022
• mingw-expat Red Hat Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function. CVE-2022-23990 Public exploitFix available 7.5 HighJanuary 26, 2022
• mingw-expat Red Hat In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of... CVE-2018-20843 Fix available 7.5 HighJune 24, 2019