Log in Start free

Vulnerability · Published Jun 4, 2026 · Assigned by mitre

CVE-2026-50219

Medium 4.9

In plain English

A medium-severity use-after-free in libexpat from libexpat project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.2%top 92.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10expat2.7.3-1.el10_2.3ALSA-2026:64810
AlmaLinux:8expat2.5.0-2.el8_10.2ALSA-2026:64809
AlmaLinux:9expat2.5.0-6.el9_8.3ALSA-2026:64812
AlmaLinux:10expat-devel2.7.3-1.el10_2.3ALSA-2026:64810
AlmaLinux:8expat-devel2.5.0-2.el8_10.2ALSA-2026:64809
AlmaLinux:9expat-devel2.5.0-6.el9_8.3ALSA-2026:64812
Alpine:v3.21expat2.8.2-r0ALPINE-CVE-2026-50219
Alpine:v3.22expat2.8.2-r0ALPINE-CVE-2026-50219
Alpine:v3.23expat2.8.2-r0ALPINE-CVE-2026-50219
Alpine:v3.24expat2.8.2-r0ALPINE-CVE-2026-50219
Debian:12expat2.5.0-1+deb12u3DEBIAN-CVE-2026-50219
Debian:13expat2.8.2-1~deb13u1DEBIAN-CVE-2026-50219
Debian:14expat2.8.2-1DEBIAN-CVE-2026-50219
Rocky Linux:10expat0:2.7.3-1.el10_2.3RLSA-2026:64810
Rocky Linux:8expat0:2.5.0-2.el8_10.2RLSA-2026:64809
Rocky Linux:9expat0:2.5.0-6.el9_8.3RLSA-2026:64812
Ubuntu:22.04:LTScadaverno fix listedUBUNTU-CVE-2026-50219
Ubuntu:24.04:LTScadaverno fix listedUBUNTU-CVE-2026-50219
Ubuntu:25.10cadaverno fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.04:LTScadaverno fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.10cadaverno fix listedUBUNTU-CVE-2026-50219
Ubuntu:22.04:LTSexpat2.4.7-1ubuntu0.8UBUNTU-CVE-2026-50219
Ubuntu:22.04:LTSexpat2.4.7-1ubuntu0.8USN-8790-1
Ubuntu:24.04:LTSexpat2.6.1-2ubuntu0.5USN-8790-1
Ubuntu:24.04:LTSexpat2.6.1-2ubuntu0.5UBUNTU-CVE-2026-50219
Ubuntu:25.10expatno fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.04:LTSexpat2.7.4-1ubuntu0.1USN-8790-1
Ubuntu:26.04:LTSexpat2.7.4-1ubuntu0.1UBUNTU-CVE-2026-50219
Ubuntu:22.04:LTSinsighttoolkit4no fix listedUBUNTU-CVE-2026-50219
Ubuntu:22.04:LTSlibxmltokno fix listedUBUNTU-CVE-2026-50219
Ubuntu:24.04:LTSlibxmltokno fix listedUBUNTU-CVE-2026-50219
Ubuntu:22.04:LTSmatanzano fix listedUBUNTU-CVE-2026-50219
Ubuntu:24.04:LTSmatanzano fix listedUBUNTU-CVE-2026-50219
Ubuntu:25.10matanzano fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.04:LTSmatanzano fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.10matanzano fix listedUBUNTU-CVE-2026-50219
Ubuntu:25.10swish-eno fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.10swish-eno fix listedUBUNTU-CVE-2026-50219
Ubuntu:22.04:LTStdomno fix listedUBUNTU-CVE-2026-50219
Ubuntu:24.04:LTStdomno fix listedUBUNTU-CVE-2026-50219
Ubuntu:25.10tdomno fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.04:LTStdomno fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.10tdomno fix listedUBUNTU-CVE-2026-50219
Ubuntu:22.04:LTSwbxml2no fix listedUBUNTU-CVE-2026-50219
Ubuntu:24.04:LTSwbxml2no fix listedUBUNTU-CVE-2026-50219
Ubuntu:25.10wbxml2no fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.04:LTSwbxml2no fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.10wbxml2no fix listedUBUNTU-CVE-2026-50219
Ubuntu:25.10xmlrpc-cno fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.04:LTSxmlrpc-cno fix listedUBUNTU-CVE-2026-50219
Ubuntu:26.10xmlrpc-cno fix listedUBUNTU-CVE-2026-50219

Affected products (as reported)

VendorProductVersions
libexpat project libexpat 0 – before 2.8.2

Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

References