Product
An out-of-bounds read and infinite loop vulnerability in libexpat versions prior to 2.8.3, triggered by improper Unicode surrogate pair handling, allows for denial-of-service via malformed XML.