An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-expatalma-upgrade-expat-develalma-upgrade-xmlrpc-calma-upgrade-xmlrpc-c-c++alma-upgrade-xmlrpc-c-clientalma-upgrade-xmlrpc-c-client++alma-upgrade-xmlrpc-c-devel | Sep 23, 2024 | Aug 30, 2024 | |
| Alpine Linux | alpine-linux-upgrade-expatalpine-linux-upgrade-qt5-qtwebenginealpine-linux-upgrade-qt6-qtwebengine | Oct 1, 2024 | Aug 30, 2024 | |
| Debian | debian-upgrade-expat | Sep 19, 2024 | Aug 30, 2024 | |
| Dell Idrac | dell-idrac-upgrade-latest | Sep 23, 2025 | Apr 8, 2025 | |
| Freebsd | freebsd-upgrade-package-qt6-webenginefreebsd-upgrade-package-qt5-webenginefreebsd-upgrade-package-expat | Nov 23, 2024 | Nov 23, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-qt-qtwebengine | Jan 24, 2025 | Aug 30, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-xmlrpc-c-help | Nov 11, 2024 | Aug 30, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-xmlrpc-c-help | Dec 12, 2024 | Aug 30, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-xmlrpc-c-help | Dec 12, 2024 | Aug 30, 2024 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-xmlrpc-c-help | Nov 11, 2024 | Aug 30, 2024 | |
| Ibm Aix | ibm-aix-python_advisory13 | Nov 6, 2024 | Aug 30, 2024 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Feb 17, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-expatoracle-linux-upgrade-expat-develoracle-linux-upgrade-xmlrpc-coracle-linux-upgrade-xmlrpc-c-coracle-linux-upgrade-xmlrpc-c-clientoracle-linux-upgrade-xmlrpc-c-devel | Oct 16, 2024 | Aug 30, 2024 |
| Redhat Openshift | linuxrpm-upgrade-rhcos | Oct 10, 2024 | Aug 30, 2024 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-expatredhat-upgrade-expat-debuginforedhat-upgrade-expat-debugsourceredhat-upgrade-expat-develredhat-upgrade-xmlrpc-credhat-upgrade-xmlrpc-c-apps-debuginforedhat-upgrade-xmlrpc-c-credhat-upgrade-xmlrpc-c-c-debuginforedhat-upgrade-xmlrpc-c-clientredhat-upgrade-xmlrpc-c-client-debuginforedhat-upgrade-xmlrpc-c-debuginforedhat-upgrade-xmlrpc-c-debugsourceredhat-upgrade-xmlrpc-c-devel | Sep 19, 2024 | Aug 30, 2024 | |
| Rocky_linux | rocky-upgrade-expatrocky-upgrade-expat-debuginforocky-upgrade-expat-debugsourcerocky-upgrade-expat-develrocky-upgrade-xmlrpc-crocky-upgrade-xmlrpc-c-c++rocky-upgrade-xmlrpc-c-c++-debuginforocky-upgrade-xmlrpc-c-clientrocky-upgrade-xmlrpc-c-client++rocky-upgrade-xmlrpc-c-client++-debuginforocky-upgrade-xmlrpc-c-client-debuginforocky-upgrade-xmlrpc-c-debuginforocky-upgrade-xmlrpc-c-debugsourcerocky-upgrade-xmlrpc-c-devel | Oct 2, 2024 | Aug 30, 2024 | |
| Suse | — | suse-upgrade-expatsuse-upgrade-libexpat-develsuse-upgrade-libexpat-devel-32bitsuse-upgrade-libexpat1suse-upgrade-libexpat1-32bitsuse-upgrade-libmozjs-115-0suse-upgrade-libmozjs-128-0suse-upgrade-libmozjs-78-0suse-upgrade-mozjs115suse-upgrade-mozjs115-develsuse-upgrade-mozjs128suse-upgrade-mozjs128-develsuse-upgrade-mozjs78suse-upgrade-mozjs78-develsuse-upgrade-x3270 | Dec 5, 2025 | Sep 19, 2024 |
| Ubuntu | ubuntu-pro-upgrade-expatubuntu-pro-upgrade-lib64expat1ubuntu-pro-upgrade-libexpat1ubuntu-pro-upgrade-libxmltok1ubuntu-pro-upgrade-libxmltok1t64ubuntu-upgrade-expatubuntu-upgrade-libexpat1 | Sep 13, 2024 | Aug 30, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub