An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libexpat | — | Upgrade macOS to the latest version | Sep 26, 2017 | Sep 26, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Debian | — | Upgrade expat | Jun 26, 2017 | Nov 15, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 21, 2024 |
| Freebsd | — | Upgrade firefoxUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade libwwwUpgrade thunderbirdUpgrade python27Upgrade firefox-esrUpgrade linux-firefoxUpgrade expatUpgrade linux-thunderbirdUpgrade libxul | Oct 11, 2017 | Nov 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade expat-develUpgrade expat | Dec 4, 2019 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade expatUpgrade expat-devel | Nov 19, 2019 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade expatUpgrade expat-devel | Nov 19, 2019 | Jun 11, 2018 |
| Mfsa2016 89 | — | Upgrade to Mozilla Firefox version 50.0 | Jul 12, 2018 | Jun 11, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Nov 15, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 11, 2018 |
| Suse | — | Upgrade sles12sp2-docker-imageUpgrade MozillaFirefox-develUpgrade libexpat1-x86Upgrade python3-develUpgrade libexpat1-32bitUpgrade MozillaFirefox-translations-otherUpgrade python3-dbmUpgrade libpython3_4m1_0-32bitUpgrade sles12-docker-imageUpgrade python3-cursesUpgrade libexpat-develUpgrade libexpat1Upgrade python3Upgrade python3-baseUpgrade sles12sp1-docker-imageUpgrade python3-tkUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-commonUpgrade expatUpgrade libpython3_4m1_0 | Nov 19, 2016 | Nov 15, 2016 |
| Ubuntu | — | Upgrade firefox | Nov 19, 2016 | Nov 15, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub