An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libexpat | — | Upgrade macOS to the latest version | Sep 26, 2017 | Sep 26, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Debian | — | Upgrade expat | Jun 26, 2017 | Nov 15, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 21, 2024 |
| Freebsd | — | Upgrade expatUpgrade linux-firefoxUpgrade libxulUpgrade linux-thunderbirdUpgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefox-esrUpgrade thunderbirdUpgrade python27Upgrade libwww | Oct 11, 2017 | Nov 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade expatUpgrade expat-devel | Dec 4, 2019 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade expat-develUpgrade expat | Nov 19, 2019 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade expat-develUpgrade expat | Nov 19, 2019 | Jun 11, 2018 |
| Mfsa2016 89 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 50.0 | Jul 12, 2018 | Jun 11, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Nov 15, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 11, 2018 |
| Suse | — | Upgrade MozillaFirefoxUpgrade expatUpgrade libpython3_4m1_0Upgrade sles12sp1-docker-imageUpgrade MozillaFirefox-translations-commonUpgrade python3-baseUpgrade python3-tkUpgrade libexpat1-x86Upgrade python3-cursesUpgrade libexpat1-32bitUpgrade libexpat1Upgrade MozillaFirefox-develUpgrade sles12sp2-docker-imageUpgrade libpython3_4m1_0-32bitUpgrade python3-develUpgrade python3Upgrade python3-dbmUpgrade libexpat-develUpgrade MozillaFirefox-translations-otherUpgrade sles12-docker-image | Nov 19, 2016 | Nov 15, 2016 |
| Ubuntu | — | Upgrade firefox | Nov 19, 2016 | Nov 15, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub