In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-expatalma-upgrade-expat-devel | May 4, 2022 | Jan 1, 2022 | |
| Alpine Linux | alpine-linux-upgrade-expat | Aug 22, 2024 | Jan 1, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-expatamazon-linux-ami-2-upgrade-expat-debuginfoamazon-linux-ami-2-upgrade-expat-develamazon-linux-ami-2-upgrade-expat-static | Jul 4, 2022 | Jan 1, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-expat | Jun 10, 2022 | Jan 1, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-expatamazon-linux-2023-upgrade-expat-debuginfoamazon-linux-2023-upgrade-expat-debugsourceamazon-linux-2023-upgrade-expat-develamazon-linux-2023-upgrade-expat-static | Feb 17, 2025 | Jan 17, 2022 | |
| Autodesk Autocad | autodesk-autocad-upgrade-latest | Jul 22, 2025 | Jul 28, 2022 | |
| Centos_linux | — | centos-upgrade-expatcentos-upgrade-expat-debuginfocentos-upgrade-expat-debugsourcecentos-upgrade-expat-develcentos-upgrade-expat-static | Mar 17, 2022 | Jan 1, 2022 |
| Debian | debian-upgrade-expat | Feb 1, 2022 | Jan 1, 2022 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 1, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-expat | Sep 30, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-expat | Apr 20, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-xulrunner | May 25, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-expathuawei-euleros-2_0_sp5-upgrade-expat-develhuawei-euleros-2_0_sp5-upgrade-expat-static | Apr 26, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-expathuawei-euleros-2_0_sp8-upgrade-expat-devel | Mar 29, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-expat | Apr 19, 2022 | Jan 1, 2022 | |
| Ibm Aix | ibm-aix-python_advisory | Oct 12, 2022 | Jan 1, 2022 | |
| Ibm Http_server | ibm-http_server-apply-interim-fix-ph43122-for-7_0ibm-http_server-apply-interim-fix-ph43122-for-8_0ibm-http_server-apply-interim-fix-ph43122-for-8_5ibm-http_server-apply-interim-fix-ph43122-for-9_0ibm-http_server-apply-fix-pack-7_0_0_46ibm-http_server-apply-fix-pack-8_0_0_16ibm-http_server-apply-fix-pack-8_5_5_22ibm-http_server-apply-fix-pack-9_0_5_11 | Aug 31, 2022 | Mar 2, 2022 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Sep 4, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-expatoracle-linux-upgrade-expat-develoracle-linux-upgrade-expat-static | Mar 17, 2022 | Jan 17, 2022 |
| Redhat_linux | redhat-upgrade-expatredhat-upgrade-expat-debuginforedhat-upgrade-expat-debugsourceredhat-upgrade-expat-develredhat-upgrade-expat-static | Mar 17, 2022 | Jan 1, 2022 | |
| Rocky_linux | rocky-upgrade-expatrocky-upgrade-expat-debuginforocky-upgrade-expat-debugsourcerocky-upgrade-expat-devel | Mar 5, 2024 | Jan 1, 2022 | |
| Suse | — | suse-upgrade-expatsuse-upgrade-libexpat-develsuse-upgrade-libexpat-devel-32bitsuse-upgrade-libexpat1suse-upgrade-libexpat1-32bit | Jan 26, 2022 | Jan 1, 2022 |
| Ubuntu | ubuntu-pro-upgrade-lib64expat1ubuntu-pro-upgrade-libexpat1ubuntu-upgrade-libexpat1 | Feb 22, 2022 | Jan 1, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub