Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-56406

libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

Description

libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

libexpat project libexpat

Default version status: unaffected

  • 0 to < 2.8.2affected

References