An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libexpat | — | Upgrade macOS to the latest version | Sep 26, 2017 | Sep 26, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Debian | — | Upgrade expat | Jun 26, 2017 | Nov 15, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 21, 2024 |
| Freebsd | — | Upgrade firefoxUpgrade seamonkeyUpgrade firefox-esrUpgrade python27Upgrade linux-seamonkeyUpgrade libwwwUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade libxulUpgrade expatUpgrade linux-firefox | Oct 11, 2017 | Nov 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade expatUpgrade expat-devel | Dec 4, 2019 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade expat-develUpgrade expat | Nov 19, 2019 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade expat-develUpgrade expat | Nov 19, 2019 | Jun 11, 2018 |
| Mfsa2016 89 | — | Upgrade to Mozilla Firefox version 50.0Upgrade to the latest version of Mozilla Firefox | Jul 12, 2018 | Jun 11, 2018 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Nov 15, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 11, 2018 |
| Suse | — | Upgrade libexpat-develUpgrade python3-dbmUpgrade python3-develUpgrade libexpat1-x86Upgrade MozillaFirefox-translations-otherUpgrade libexpat1-32bitUpgrade sles12sp2-docker-imageUpgrade libpython3_4m1_0-32bitUpgrade sles12-docker-imageUpgrade python3-cursesUpgrade MozillaFirefox-develUpgrade python3Upgrade libexpat1Upgrade MozillaFirefoxUpgrade expatUpgrade python3-baseUpgrade libpython3_4m1_0Upgrade MozillaFirefox-translations-commonUpgrade sles12sp1-docker-imageUpgrade python3-tk | Nov 19, 2016 | Nov 15, 2016 |
| Ubuntu | — | Upgrade firefox | Nov 19, 2016 | Nov 15, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub