Red Hat Security Advisory

RHSA-2026:88247

expat security update

Released 2026-10-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) expat-devel-2.5.0-6.el9_8.7
Red Hat Enterprise Linux BaseOS (v. 9) expat-2.5.0-6.el9_8.7

Fixes 2 records

TI-2026-69154 CVE-2026-77214 · GHSA-8xfx-9m5m-pgcp

Heap buffer over-read in libexpat XML_ParseBuffer

MEDIUM 42

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.0032 Published 2026-10-07 Partial fix CWE-125

TI-2026-65452 CVE-2026-102633 · GHSA-533f-rf84-jgcc

libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc

LOW 36

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00368 Published 2026-09-29 Partial fix CWE-190