Product
An unvalidated buffer length parameter in the libexpat XML_ParseBuffer function allows remote attackers to trigger a heap buffer over-read, potentially leaking sensitive memory for ASLR bypass.