Red Hat Security Advisory

RHSA-2026:54869

Red Hat Hardened Images RPMs Security Update

Released 2026-08-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images expat-2.8.3-0.1.hum1@aarch64, expat-2.8.3-0.1.hum1@src, expat-2.8.3-0.1.hum1@x86_64 +4

Fixes 1 record

TI-2026-50786 CVE-2026-72522 · GHSA-v867-w97p-3vx2

Out-of-bounds read in libexpat

LOW 27

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00191 Published 2026-08-10 Partial fix · 2.8.3 CWE-125