An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libexpat | — | Upgrade macOS to the latest version | Sep 26, 2017 | Sep 26, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Debian | — | Upgrade expat | Jun 26, 2017 | Nov 15, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 21, 2024 |
| Freebsd | — | Upgrade seamonkeyUpgrade libwwwUpgrade firefox-esrUpgrade linux-seamonkeyUpgrade python27Upgrade thunderbirdUpgrade firefoxUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade libxulUpgrade expat | Oct 11, 2017 | Nov 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade expatUpgrade expat-devel | Dec 4, 2019 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade expat-develUpgrade expat | Nov 19, 2019 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade expat-develUpgrade expat | Nov 19, 2019 | Jun 11, 2018 |
| Mfsa2016 89 | — | Upgrade to Mozilla Firefox version 50.0 | Jul 12, 2018 | Jun 11, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Nov 15, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 11, 2018 |
| Suse | — | Upgrade python3-dbmUpgrade mozillafirefox-translations-otherUpgrade mozillafirefoxUpgrade sles12sp2-docker-imageUpgrade libexpat1-32bitUpgrade libpython3_4m1_0-32bitUpgrade python3Upgrade python3-cursesUpgrade libexpat-develUpgrade libexpat1-x86Upgrade sles12-docker-imageUpgrade python3-develUpgrade libexpat1Upgrade python3-tkUpgrade libpython3_4m1_0Upgrade python3-baseUpgrade expatUpgrade sles12sp1-docker-imageUpgrade mozillafirefox-develUpgrade mozillafirefox-translations-common | Nov 19, 2016 | Nov 15, 2016 |
| Ubuntu | — | Upgrade firefox | Nov 19, 2016 | Nov 15, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub