libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw32-expatUpgrade expat-develUpgrade thunderbirdUpgrade expatUpgrade firefoxUpgrade mingw64-expat | Oct 11, 2022 | Sep 14, 2022 |
| Alpine Linux | — | Upgrade expat | Aug 22, 2024 | Sep 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade expatUpgrade firefoxUpgrade firefox-debuginfoUpgrade expat-develUpgrade thunderbird-debuginfoUpgrade thunderbirdUpgrade expat-staticUpgrade expat-debuginfo | Nov 10, 2022 | Sep 14, 2022 |
| Amazon_linux | — | amazon-linux-upgrade-expat | Dec 10, 2022 | Sep 14, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-expatamazon-linux-2023-upgrade-expat-debuginfoamazon-linux-2023-upgrade-expat-debugsourceamazon-linux-2023-upgrade-expat-develamazon-linux-2023-upgrade-expat-static | Feb 17, 2025 | Sep 14, 2022 | |
| Apache Openoffice | apache-openoffice-upgrade-latest | Sep 12, 2025 | Sep 14, 2022 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Sep 14, 2022 | |
| Autodesk Autocad | autodesk-autocad-upgrade-latest | Jul 22, 2025 | Jun 23, 2023 | |
| Centos_linux | — | Upgrade thunderbird-debugsourceUpgrade expat-staticUpgrade compat-expat1-debuginfoUpgrade firefoxUpgrade thunderbirdUpgrade expat-debugsourceUpgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade expat-debuginfoUpgrade firefox-debugsourceUpgrade expat-develUpgrade expatUpgrade compat-expat1 | Oct 20, 2022 | Sep 14, 2022 |
| Debian | — | Upgrade expat | Sep 26, 2022 | Sep 14, 2022 |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 31, 2022 |
| Freebsd | — | Upgrade expat | Nov 4, 2022 | Sep 27, 2022 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade dev-libs/expat. | Sep 30, 2022 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade expat | Dec 22, 2022 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade expat-develUpgrade expatUpgrade expat-static | Mar 9, 2023 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade expat-develUpgrade expat | Dec 9, 2022 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade expat | Nov 15, 2022 | Sep 14, 2022 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory2 | Nov 2, 2022 | Sep 14, 2022 |
| Ibm Http_server | — | Apply IBM HTTP Server version 8.5.5.23 or laterApply IBM HTTP Server version 8.0.0.16 or laterApply IBM HTTP Server version 9.0.5.14 or laterApply IBM HTTP Server version 7.0.0.46 or laterApply IBM HTTP Server Interim Fix PH49572 | Nov 26, 2025 | Oct 5, 2022 |
| Mfsa2022 47 | — | Upgrade to Mozilla Firefox version 107.0 | Nov 16, 2022 | Sep 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | oracle-linux-upgrade-compat-expat1oracle-linux-upgrade-expatoracle-linux-upgrade-expat-develoracle-linux-upgrade-expat-staticoracle-linux-upgrade-firefoxoracle-linux-upgrade-thunderbird | Oct 7, 2022 | Sep 14, 2022 |
| Redhat_linux | — | Upgrade thunderbird-debuginfoUpgrade expatUpgrade mingw64-expatUpgrade expat-debugsourceUpgrade firefox-debugsourceUpgrade firefoxNo solution existsUpgrade firefox-debuginfoUpgrade mingw64-expat-debuginfoUpgrade mingw32-expat-debuginfoUpgrade expat-staticUpgrade mingw32-expatUpgrade thunderbird-debugsourceUpgrade expat-debuginfoUpgrade thunderbirdUpgrade expat-devel | Oct 20, 2022 | Sep 14, 2022 |
| Rocky_linux | rocky-upgrade-expatrocky-upgrade-expat-debuginforocky-upgrade-expat-debugsourcerocky-upgrade-expat-develrocky-upgrade-firefoxrocky-upgrade-firefox-debuginforocky-upgrade-firefox-debugsourcerocky-upgrade-thunderbirdrocky-upgrade-thunderbird-debuginforocky-upgrade-thunderbird-debugsource | Mar 12, 2024 | Sep 14, 2022 | |
| Suse | — | suse-upgrade-expatsuse-upgrade-libexpat-develsuse-upgrade-libexpat-devel-32bitsuse-upgrade-libexpat1suse-upgrade-libexpat1-32bit | Oct 26, 2022 | Sep 14, 2022 |
| Ubuntu | ubuntu-pro-upgrade-expatubuntu-pro-upgrade-lib64expat1ubuntu-pro-upgrade-libexpat1ubuntu-upgrade-expatubuntu-upgrade-firefoxubuntu-upgrade-libexpat1 | Sep 27, 2022 | Sep 14, 2022 | |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub