Skip to contentLibexpat Project Libexpat vulnerabilities
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morestoreAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22827Fix available8.8 High
- libexpat project libexpat, netapp active iq unified manager, clustered data ontap +8 more +10 moreIn doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for...CVE-2021-46143Public exploitFix available8.1 High
- libexpat project libexpat, debian linux, netapp active iq unified manager +8 more +10 moreIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...CVE-2021-45960Public exploitFix available8.8 High
- libexpat project libexpat, python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...CVE-2019-15903Fix available7.5 High
- libexpat project libexpat, canonical ubuntu linux, debian linux +9 more +11 moreIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...CVE-2018-20843Fix available7.5 High
- libexpat project libexpatThe writeRandomBytes_RtlGenRandom function in xmlparse.c in libexpat in Expat 2.2.1 and 2.2.2 on...CVE-2017-117427.8 High
- libexpat project libexpat, debian linux, python +2 moreXML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows...CVE-2017-9233Fix available7.5 High
- canonical ubuntu linux, debian linux, google android +1 more +3 moreThe XML parser in Expat does not use sufficient entropy for hash initialization, which allows...CVE-2016-5300Fix available7.5 High
- canonical ubuntu linux, libexpat project libexpat, mcafee policy auditor +1 more +3 moreThe overflow protection in Expat is removed by compilers with certain optimization settings,...CVE-2016-4472Fix availableEPSS 11.9%8.1 High
- apple mac os x, canonical ubuntu linux, debian linux +11 more +13 moreExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...CVE-2016-0718Fix availableEPSS 13.3%9.8 Critical
- google chrome, canonical ubuntu linux, debian linux +10 more +12 moreMultiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in...CVE-2015-1283Fix availableEPSS 18.3%6.8 Medium
- apple ipados, iphone os, macos +7 more +9 moreexpat 2.1.0 and earlier does not properly handle entities expansion unless an application...CVE-2013-0340Fix availableEPSS 19.4%6.8 Medium
- canonical ubuntu linux, debian linux, google android +1 more +3 moreExpat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes...CVE-2012-6702Fix available5.9 Medium
- apple mac os x, libexpat project libexpat +1 morereadfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of...CVE-2012-11474.3 Medium
- apple mac os x, libexpat project libexpat +1 moreMemory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context...CVE-2012-1148Fix available5.0 Medium
- canonical ubuntu linux, debian linux, libexpat project libexpat +8 more +10 moreThe XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the...CVE-2012-0876Fix available4.3 Medium
- libexpat project libexpat, apache http server +1 moreThe big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig...CVE-2009-3560Fix availableEPSS 24.3%5.0 Medium
- libexpat project libexpat, apache http server +1 moreThe updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python,...CVE-2009-3720Fix availableEPSS 27.9%5.0 Medium