Llibexpat

Products

Exploited and recent CVEs

• CVE-2026-118370 Medium 5.9 libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes 0.4%
• CVE-2026-117610 Medium 5.9 libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser 0.4%
• CVE-2026-115506 High 7.5 libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay 0.4%
• CVE-2026-113351 Medium 5.9 libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset 0.5%
• CVE-2026-77214 High 8.2 libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer 0.3%
• CVE-2026-102633 Medium 5.9 libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc 0.4%
• CVE-2026-93990 High 7.5 Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate 0.4%
• CVE-2026-76641 High 7.5 Expat Out-of-Bounds Read via dtdCopy 0.4%