Vulnerabilities

TI-2026-25267 CVE-2026-32778 · GHSA-hx82-g397-5ggr

NULL pointer dereference in libexpat

LOW 24

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00177 Published 2026-03-16 Partial fix · 2.7.5 CWE-476

TI-2026-25266 CVE-2026-32777 · GHSA-9rpf-mhcj-gv7r

LOW 24

libexpat before 2.7.5 allows an infinite loop while parsing DTD content.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00225 Published 2026-03-16 Partial fix · 2.7.5 CWE-835

TI-2026-25265 CVE-2026-32776 · GHSA-r8fp-cwhw-m8hh

LOW 24

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00171 Published 2026-03-16 Partial fix · 2.7.5 CWE-476