Approved changes feed: RSS · Atom
cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Libexpat Project (e29c4727-b64c-50dc-9a8c-91c5ae43680d) |
|---|---|
| Product | Libexpat (a2405558-ea88-5206-8653-ff8a0583d290) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/libexpat/libexpat |
purl2cpe | 2026-06-01 10:15:47.572642 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-72522 |
vulnerable | 2026-09-16 04:33:08.409591 |
Details available
MEDIUM (6.2)
libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.
Published: 2026-08-10T03:28:04.274Z
Updated: 2026-08-13T14:08:42.155Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56412 |
vulnerable | 2026-07-29 01:00:29.151788 |
Details available
MEDIUM (4.9)
libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.
Published: 2026-06-21T15:58:59.347Z
Updated: 2026-06-22T16:31:06.166Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56411 |
vulnerable | 2026-07-29 01:00:29.151573 |
Details available
MEDIUM (6.9)
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.
Published: 2026-06-21T15:56:42.729Z
Updated: 2026-06-22T16:31:30.518Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56410 |
vulnerable | 2026-07-29 01:00:29.151365 |
Details available
MEDIUM (6.9)
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.
Published: 2026-06-21T15:55:00.448Z
Updated: 2026-06-22T15:56:58.296Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56409 |
vulnerable | 2026-07-29 01:00:29.151261 |
Details available
MEDIUM (6.5)
xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.
Published: 2026-06-21T15:52:59.663Z
Updated: 2026-06-22T15:56:24.103Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56408 |
vulnerable | 2026-07-29 01:00:29.151084 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56407 |
vulnerable | 2026-07-29 01:00:29.150909 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56406 |
vulnerable | 2026-07-29 01:00:29.150694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56405 |
vulnerable | 2026-07-29 01:00:29.150474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56404 |
vulnerable | 2026-07-29 01:00:29.150362 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56403 |
vulnerable | 2026-07-29 01:00:29.150234 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56132 |
vulnerable | 2026-07-29 01:00:28.907904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56131 |
vulnerable | 2026-07-29 01:00:28.907660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7210 |
vulnerable | 2026-06-08 08:07:05.514522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50219 |
vulnerable | 2026-06-08 08:07:02.796372 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45186 |
vulnerable | 2026-06-08 08:05:11.492892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41080 |
vulnerable | 2026-06-08 08:03:14.705680 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32778 |
vulnerable | 2026-06-08 07:57:18.152630 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32777 |
vulnerable | 2026-06-08 07:57:18.152377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32776 |
vulnerable | 2026-06-08 07:57:18.152045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25210 |
vulnerable | 2026-06-08 07:53:19.507350 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24515 |
vulnerable | 2026-06-08 07:51:17.785054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66382 |
vulnerable | 2026-06-08 07:41:18.810883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59375 |
vulnerable | 2026-06-08 07:35:21.775057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50602 |
vulnerable | 2026-06-08 06:52:11.261317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45492 |
vulnerable | 2026-06-08 06:48:06.369713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45491 |
vulnerable | 2026-06-08 06:48:06.368694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45490 |
vulnerable | 2026-06-08 06:48:06.360567 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28757 |
vulnerable | 2026-06-08 06:33:27.206366 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52426 |
vulnerable | 2026-06-08 06:17:55.032071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52425 |
vulnerable | 2026-06-08 06:17:55.031371 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43680 |
vulnerable | 2026-06-08 05:49:33.733564 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40674 |
vulnerable | 2026-06-08 05:48:27.876191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25315 |
vulnerable | 2026-06-08 05:41:45.709762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25314 |
vulnerable | 2026-06-08 05:41:45.708683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25313 |
vulnerable | 2026-06-08 05:41:45.707241 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25236 |
vulnerable | 2026-06-08 05:41:45.592945 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25235 |
vulnerable | 2026-06-08 05:41:45.588342 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23990 |
vulnerable | 2026-06-08 05:40:59.470011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23852 |
vulnerable | 2026-06-08 05:40:59.267823 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22827 |
vulnerable | 2026-06-08 05:40:55.492135 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22826 |
vulnerable | 2026-06-08 05:40:55.491521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22825 |
vulnerable | 2026-06-08 05:40:55.490997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22824 |
vulnerable | 2026-06-08 05:40:55.490358 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22823 |
vulnerable | 2026-06-08 05:40:55.489578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22822 |
vulnerable | 2026-06-08 05:40:55.486963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46143 |
vulnerable | 2026-06-08 05:36:49.771581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45960 |
vulnerable | 2026-06-08 05:36:49.609771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15903 |
vulnerable | 2026-06-08 05:12:58.200991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20843 |
vulnerable | 2026-06-08 05:11:28.146387 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9233 |
vulnerable | 2026-06-08 05:10:09.509257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5300 |
vulnerable | 2026-06-08 05:07:56.652850 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4472 |
vulnerable | 2026-06-08 05:07:54.617193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0718 |
vulnerable | 2026-06-08 05:07:15.902783 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1283 |
vulnerable | 2026-06-08 05:06:25.277787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0340 |
vulnerable | 2026-06-08 05:03:47.249028 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6702 |
vulnerable | 2026-06-08 05:03:01.581898 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1148 |
vulnerable | 2026-06-08 05:00:47.793878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1147 |
vulnerable | 2026-06-08 05:00:47.788281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0876 |
vulnerable | 2026-06-08 05:00:46.158395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.