A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-expatalma-upgrade-expat-develalma-upgrade-xmlrpc-calma-upgrade-xmlrpc-c-c++alma-upgrade-xmlrpc-c-clientalma-upgrade-xmlrpc-c-client++alma-upgrade-xmlrpc-c-devel | Apr 4, 2025 | Mar 14, 2025 | |
| Alpine Linux | alpine-linux-upgrade-expat | Aug 8, 2025 | Mar 14, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-xmlrpc-camazon-linux-2023-upgrade-xmlrpc-c-appsamazon-linux-2023-upgrade-xmlrpc-c-apps-debuginfoamazon-linux-2023-upgrade-xmlrpc-c-camazon-linux-2023-upgrade-xmlrpc-c-c-debuginfoamazon-linux-2023-upgrade-xmlrpc-c-clientamazon-linux-2023-upgrade-xmlrpc-c-client-debuginfoamazon-linux-2023-upgrade-xmlrpc-c-debuginfoamazon-linux-2023-upgrade-xmlrpc-c-debugsourceamazon-linux-2023-upgrade-xmlrpc-c-devel | Oct 28, 2025 | Mar 13, 2025 | |
| Apple Osx Libexpat | apple-osx-upgrade-latest | May 13, 2025 | Mar 14, 2025 | |
| Debian | debian-upgrade-expat | May 15, 2025 | Mar 14, 2025 | |
| Dell Powerstore Dsa2025342 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| Freebsd | freebsd-upgrade-package-expat | Apr 10, 2025 | Apr 9, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-expat | Jul 11, 2025 | Mar 14, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-expat | Jun 13, 2025 | Mar 14, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-expat | Jun 11, 2025 | Mar 14, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-expat | Jul 1, 2025 | Mar 14, 2025 | |
| Ibm Aix | ibm-aix-perl_advisory10ibm-aix-perl_advisory12ibm-aix-python_advisory15 | May 21, 2025 | Mar 14, 2025 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Aug 22, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-expatoracle-linux-upgrade-expat-develoracle-linux-upgrade-xmlrpc-coracle-linux-upgrade-xmlrpc-c-coracle-linux-upgrade-xmlrpc-c-clientoracle-linux-upgrade-xmlrpc-c-devel | Apr 4, 2025 | Mar 13, 2025 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-expatredhat-upgrade-expat-debuginforedhat-upgrade-expat-debugsourceredhat-upgrade-expat-develredhat-upgrade-xmlrpc-credhat-upgrade-xmlrpc-c-apps-debuginforedhat-upgrade-xmlrpc-c-credhat-upgrade-xmlrpc-c-c-debuginforedhat-upgrade-xmlrpc-c-clientredhat-upgrade-xmlrpc-c-client-debuginforedhat-upgrade-xmlrpc-c-debuginforedhat-upgrade-xmlrpc-c-debugsourceredhat-upgrade-xmlrpc-c-devel | Apr 3, 2025 | Mar 14, 2025 | |
| Rocky_linux | rocky-upgrade-expatrocky-upgrade-expat-debuginforocky-upgrade-expat-debugsourcerocky-upgrade-expat-develrocky-upgrade-xmlrpc-crocky-upgrade-xmlrpc-c-c++rocky-upgrade-xmlrpc-c-c++-debuginforocky-upgrade-xmlrpc-c-clientrocky-upgrade-xmlrpc-c-client++rocky-upgrade-xmlrpc-c-client++-debuginforocky-upgrade-xmlrpc-c-client-debuginforocky-upgrade-xmlrpc-c-debuginforocky-upgrade-xmlrpc-c-debugsourcerocky-upgrade-xmlrpc-c-devel | Jul 31, 2025 | Jul 29, 2025 | |
| Suse | — | suse-upgrade-expatsuse-upgrade-libexpat-develsuse-upgrade-libexpat-devel-32bitsuse-upgrade-libexpat1suse-upgrade-libexpat1-32bit | Dec 5, 2025 | Apr 4, 2025 |
| Ubuntu | ubuntu-upgrade-expatubuntu-upgrade-libexpat1 | Apr 9, 2025 | Mar 14, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Mar 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub