Red Hat Security Advisory

RHSA-2025:22035

expat security update

Released 2025-11-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.9.0) expat-2.2.10-12.el9_0.4

Fixes 4 records

TI-2024-07583 CVE-2024-8176 · GHSA-9hcv-xw76-m4h6

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

HIGH 72

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01353 Published 2025-03-14 Partial fix · 2.7.0, 2.7.1-1.el10_0 +18 CWE-674

TI-2013-00270 CVE-2013-0340 · GHSA-w3v2-46wf-pq33

XML external entity injection in libexpat

MEDIUM 54

expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource cons…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.19433 Published 2014-01-21 Partial fix · 2.4.0 CWE-611

TI-2023-28773 CVE-2023-52425 · GHSA-gh68-jm46-84rf

libexpat through 2.5.0 allows a denial of service (resource consumption) because many…

MEDIUM 43

libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02149 Published 2024-02-04 Partial fix CWE-400

TI-2025-36934 CVE-2025-59375 · GHSA-vjqp-pjp6-xcxx

Resource allocation without limits in libexpat

LOW 36

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0138 Published 2025-09-15 Partial fix · 2.7.2 CWE-770