Approved changes feed: RSS · Atom

cpe:2.3:a:libexpat:expat:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLibexpat (2f49d34a-aa55-5267-8c0b-0a6c23f48ffb)
ProductExpat (76ac7b3a-f355-567b-a528-6a4071ab8772)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:Rpm/opensuse/expat purl2cpe 2026-06-01 10:11:51.841970
pkg:deb/debian/expat purl2cpe 2026-06-01 10:11:51.841956
pkg:deb/ubuntu/expat purl2cpe 2026-06-01 10:11:51.841959
pkg:github/libexpat/libexpat purl2cpe 2026-06-01 10:11:51.841962
pkg:rpm/centos/expat purl2cpe 2026-06-01 10:11:51.841964
pkg:rpm/fedora/expat purl2cpe 2026-06-01 10:11:51.841967
pkg:sourceforge/expat purl2cpe 2026-06-01 10:11:51.841973

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45492 vulnerable 2026-06-08 06:48:06.369160 Details available
An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).
Published: 2024-08-30T00:00:00.000Z
Updated: 2026-07-14T12:38:05.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45491 vulnerable 2026-06-08 06:48:06.368348 Details available
An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).
Published: 2024-08-30T00:00:00.000Z
Updated: 2026-07-14T12:38:04.505Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.