Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:libexpat:expat:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Heap Buffer Over-Read Vulnerability in libexpat

An unvalidated buffer length parameter in the libexpat XML_ParseBuffer function allows remote attackers to trigger a heap buffer over-read, potentially leaking sensitive memory for ASLR bypass.

libexpat
1c
high advisory

Expat UTF-16 Improper Surrogate Validation Vulnerability

The Expat library through version 2.8.4 incorrectly validates UTF-16 surrogate pairs, allowing attackers to perform XML injection via malformed input that obscures markup characters.

Expat
1c