A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade expatUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-develUpgrade xmlrpc-c-c++Upgrade xmlrpc-cUpgrade expat-devel | Apr 4, 2025 | Mar 14, 2025 |
| Alpine Linux | — | Upgrade expat | Aug 8, 2025 | Mar 14, 2025 |
| Amazon_linux_2023 | — | Upgrade xmlrpc-cUpgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-c-appsUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-clientUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-apps-debuginfo | Oct 28, 2025 | Mar 13, 2025 |
| Apple Osx Libexpat | — | Upgrade macOS to the latest version | May 13, 2025 | May 12, 2025 |
| Debian | — | Upgrade expat | May 15, 2025 | Mar 14, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade expat | Apr 10, 2025 | Apr 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade expat | Jul 11, 2025 | Mar 14, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade expat | Jun 13, 2025 | Mar 14, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade expat | Jun 11, 2025 | Mar 14, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade expat | Jul 1, 2025 | Mar 14, 2025 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory12Apply the fix or workaround for perl_advisory10Apply the fix or workaround for python_advisory15 | May 21, 2025 | Mar 14, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade xmlrpc-c-c++Upgrade xmlrpc-c-client++Upgrade xmlrpc-cUpgrade expatUpgrade xmlrpc-c-clientUpgrade expat-devel | Apr 4, 2025 | Mar 13, 2025 |
| Redhat_linux | — | Upgrade expatUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-client-debuginfoUpgrade xmlrpc-cUpgrade xmlrpc-c-apps-debuginfoUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-client++No solution existsUpgrade xmlrpc-c-c++-debuginfoUpgrade expat-debuginfoUpgrade xmlrpc-c-debugsourceUpgrade xmlrpc-c-develUpgrade expat-debugsourceUpgrade expat-devel | Apr 3, 2025 | Mar 14, 2025 |
| Rocky_linux | — | Upgrade expat-debuginfoUpgrade expat-develUpgrade expatUpgrade xmlrpc-c-client++Upgrade xmlrpc-c-c++-debuginfoUpgrade xmlrpc-c-c++Upgrade xmlrpc-c-client++-debuginfoUpgrade xmlrpc-c-clientUpgrade xmlrpc-c-debuginfoUpgrade xmlrpc-c-client-debuginfoUpgrade expat-debugsourceUpgrade xmlrpc-c-develUpgrade xmlrpc-c-debugsourceUpgrade xmlrpc-c | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade libexpat1Upgrade expatUpgrade libexpat-develUpgrade libexpat-devel-32bitUpgrade libexpat1-32bit | Dec 5, 2025 | Apr 4, 2025 |
| Ubuntu | — | Upgrade expatUpgrade libexpat1 | Apr 9, 2025 | Mar 14, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub