Read the docs
Red Hat Security Advisory

RHSA-2026:92323

expat security update

Released 2026-10-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 2 records

TI-2026-69154 CVE-2026-77214 · GHSA-8xfx-9m5m-pgcp

Heap buffer over-read in libexpat XML_ParseBuffer

Priority MEDIUM 42

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.0032 Published 2026-10-07 Partial fix CWE-125
TI-2026-65452 CVE-2026-102633 · GHSA-533f-rf84-jgcc

libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc

Priority LOW 36

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00368 Published 2026-09-29 Partial fix CWE-190