Libexpat Expat vulnerabilities

• libexpat libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes CVE-2026-118370 Fix available 8.2 HighOctober 28, 2026
• libexpat libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser CVE-2026-117610 Fix available 8.2 HighOctober 28, 2026
• libexpat libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay CVE-2026-115506 Fix available 8.7 HighOctober 22, 2026
• libexpat libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset CVE-2026-113351 Fix available 8.2 HighOctober 20, 2026
• libexpat libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer CVE-2026-77214 Fix available 8.3 HighOctober 7, 2026
• libexpat libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc CVE-2026-102633 Fix available 8.2 HighSeptember 29, 2026
• libexpat Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate CVE-2026-93990 Fix available 8.7 HighSeptember 19, 2026
• libexpat Expat Out-of-Bounds Read via dtdCopy CVE-2026-76641 Fix available 8.7 HighAugust 20, 2026
• libexpat expat, libexpat project libexpat, siemens ruggedcom rst2428p +5 more +7 more An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an... CVE-2024-45492 Fix available 9.8 CriticalAugust 30, 2024
• libexpat expat, libexpat project libexpat, siemens ruggedcom rst2428p +5 more +7 more An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer... CVE-2024-45491 Fix available 9.8 CriticalAugust 30, 2024