An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libexpat | — | Upgrade macOS to the latest version | Sep 26, 2017 | Sep 26, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Debian | — | Upgrade expat | Jun 26, 2017 | Nov 15, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 21, 2024 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade expatUpgrade linux-firefoxUpgrade libxulUpgrade seamonkeyUpgrade python27Upgrade firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefox-esrUpgrade libwww | Oct 11, 2017 | Nov 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade expatUpgrade expat-devel | Dec 4, 2019 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade expat-develUpgrade expat | Nov 19, 2019 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade expatUpgrade expat-devel | Nov 19, 2019 | Jun 11, 2018 |
| Mfsa2016 89 | — | Upgrade to Mozilla Firefox version 50.0 | Jul 12, 2018 | Jun 11, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Nov 15, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 11, 2018 |
| Suse | — | Upgrade sles12sp1-docker-imageUpgrade python3-tkUpgrade libpython3_4m1_0Upgrade mozillafirefox-translations-commonUpgrade mozillafirefox-develUpgrade python3-baseUpgrade expatUpgrade python3-develUpgrade libexpat1-x86Upgrade sles12-docker-imageUpgrade libexpat1Upgrade libexpat1-32bitUpgrade python3-cursesUpgrade mozillafirefox-translations-otherUpgrade mozillafirefoxUpgrade libexpat-develUpgrade python3-dbmUpgrade libpython3_4m1_0-32bitUpgrade sles12sp2-docker-imageUpgrade python3 | Nov 19, 2016 | Nov 15, 2016 |
| Ubuntu | — | Upgrade firefox | Nov 19, 2016 | Nov 15, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub