Записи libexpat project
64 опубликованных записей вендора libexpat project.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 2
- С записью об исправлении
- 98,4 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-190 Integer Overflow or Wraparound24
- CWE-416 Use After Free6
- CWE-611 Improper Restriction of XML External Entity Reference4
- CWE-476 NULL Pointer Dereference3
- CWE-407 Inefficient Algorithmic Complexity3
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
64 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
50В плане | CVE-2022-25236Proof of concept | xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.libexpat project · libexpat · CWE-668 | Критическая9,8 | — | 35,2 % | 16 февр. 2022 г. |
43В плане | CVE-2016-0718Эксплойта нет | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input docummozilla · firefox · CWE-119 | Критическая9,8 | — | 13,3 % | 26 мая 2016 г. |
41В плане | CVE-2022-22822Proof of concept | addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.libexpat project · libexpat · CWE-190 | Критическая9,8 | — | 5,1 % | 10 янв. 2022 г. |
41В плане | CVE-2022-23852Proof of concept | Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.libexpat project · libexpat · CWE-190 | Критическая9,8 | — | 5,0 % | 24 янв. 2022 г. |
40В плане | CVE-2022-25235Proof of concept | xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is vallibexpat project · libexpat · CWE-116 | Критическая9,8 | — | 4,9 % | 16 февр. 2022 г. |
40В плане | CVE-2022-25315Proof of concept | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.libexpat project · libexpat · CWE-190 | Критическая9,8 | — | 4,8 % | 18 февр. 2022 г. |
40В плане | CVE-2022-22824Эксплойта нет | defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.libexpat project · libexpat · CWE-190 | Критическая9,8 | — | 3,5 % | 10 янв. 2022 г. |
40В плане | CVE-2022-22823Эксплойта нет | build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.libexpat project · libexpat · CWE-190 | Критическая9,8 | — | 3,5 % | 10 янв. 2022 г. |
39Наблюдать | CVE-2024-45492Эксплойта нет | An issue was discovered in libexpat before 2.6.3.libexpat project · libexpat · CWE-190 | Критическая9,8 | — | 1,3 % | 29 авг. 2024 г. |
39Наблюдать | CVE-2024-45491Эксплойта нет | An issue was discovered in libexpat before 2.6.3.libexpat project · libexpat · CWE-190 | Критическая9,8 | — | 1,1 % | 29 авг. 2024 г. |
36Наблюдать | CVE-2016-4472Эксплойта нет | The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a deniallibexpat project · libexpat · CWE-119 | Высокая8,1 | — | 11,9 % | 30 июн. 2016 г. |
36Наблюдать | CVE-2021-45960Proof of concept | In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehlibexpat project · libexpat · CWE-682 | Высокая8,8 | — | 4,3 % | 1 янв. 2022 г. |
36Наблюдать | CVE-2022-22827Эксплойта нет | storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.libexpat project · libexpat · CWE-190 | Высокая8,8 | — | 2,9 % | 10 янв. 2022 г. |
36Наблюдать | CVE-2022-22826Эксплойта нет | nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.libexpat project · libexpat · CWE-190 | Высокая8,8 | — | 2,9 % | 10 янв. 2022 г. |
36Наблюдать | CVE-2022-22825Эксплойта нет | lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.libexpat project · libexpat · CWE-190 | Высокая8,8 | — | 2,7 % | 10 янв. 2022 г. |
34Наблюдать | CVE-2026-66046Эксплойта нет | Expat Denial of Service via storeAtts() Quadratic Complexitylibexpat project · libexpat · CWE-407 | Высокая8,7 | — | 0,7 % | 18 авг. 2026 г. |
33Наблюдать | CVE-2013-0340Эксплойта нет | expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler funlibexpat project · libexpat · CWE-611 | Средняя6,8 | — | 19,4 % | 21 янв. 2014 г. |
33Наблюдать | CVE-2015-1283Эксплойта нет | Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other prodgoogle · chrome · CWE-190 | Средняя6,8 | — | 18,4 % | 22 июл. 2015 г. |
33Наблюдать | CVE-2017-9233Эксплойта нет | XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinitelibexpat project · libexpat · CWE-611 | Высокая7,5 | — | 8,7 % | 25 июл. 2017 г. |
33Наблюдать | CVE-2022-40674Эксплойта нет | libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.libexpat project · libexpat · CWE-416 | Высокая8,1 | — | 2,2 % | 14 сент. 2022 г. |
32Наблюдать | CVE-2018-20843Эксплойта нет | In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a hlibexpat project · libexpat · CWE-611 | Высокая7,5 | — | 7,1 % | 24 июн. 2019 г. |
32Наблюдать | CVE-2019-15903Эксплойта нет | In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutivlibexpat project · libexpat · CWE-125 | Высокая7,5 | — | 6,6 % | 4 сент. 2019 г. |
32Наблюдать | CVE-2016-5300Эксплойта нет | The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial canonical · ubuntu linux · CWE-399 | Высокая7,5 | — | 6,5 % | 16 июн. 2016 г. |
32Наблюдать | CVE-2021-46143Proof of concept | In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.libexpat project · libexpat · CWE-190 | Высокая7,8 | — | 4,2 % | 6 янв. 2022 г. |
31Наблюдать | CVE-2022-25314Proof of concept | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.libexpat project · libexpat · CWE-190 | Высокая7,5 | — | 4,8 % | 18 февр. 2022 г. |
- CVE-2022-2523650В плане
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
КритическаяCVSS 9,8Proof of conceptEPSS 35 %libexpat project · libexpat16 февр. 2022 г.
- CVE-2016-071843В плане
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input docum
КритическаяCVSS 9,8Эксплойта нетEPSS 13 %mozilla · firefox26 мая 2016 г.
- CVE-2022-2282241В плане
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
КритическаяCVSS 9,8Proof of conceptEPSS 5 %libexpat project · libexpat10 янв. 2022 г.
- CVE-2022-2385241В плане
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
КритическаяCVSS 9,8Proof of conceptEPSS 5 %libexpat project · libexpat24 янв. 2022 г.
- CVE-2022-2523540В плане
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is val
КритическаяCVSS 9,8Proof of conceptEPSS 4 %libexpat project · libexpat16 февр. 2022 г.
- CVE-2022-2531540В плане
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
КритическаяCVSS 9,8Proof of conceptEPSS 4 %libexpat project · libexpat18 февр. 2022 г.
- CVE-2022-2282440В плане
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %libexpat project · libexpat10 янв. 2022 г.
- CVE-2022-2282340В плане
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %libexpat project · libexpat10 янв. 2022 г.
- CVE-2024-4549239Наблюдать
An issue was discovered in libexpat before 2.6.3.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %libexpat project · libexpat29 авг. 2024 г.
- CVE-2024-4549139Наблюдать
An issue was discovered in libexpat before 2.6.3.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %libexpat project · libexpat29 авг. 2024 г.
- CVE-2016-447236Наблюдать
The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial
ВысокаяCVSS 8,1Эксплойта нетEPSS 11 %libexpat project · libexpat30 июн. 2016 г.
- CVE-2021-4596036Наблюдать
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbeh
ВысокаяCVSS 8,8Proof of conceptEPSS 4 %libexpat project · libexpat1 янв. 2022 г.
- CVE-2022-2282736Наблюдать
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %libexpat project · libexpat10 янв. 2022 г.
- CVE-2022-2282636Наблюдать
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %libexpat project · libexpat10 янв. 2022 г.
- CVE-2022-2282536Наблюдать
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %libexpat project · libexpat10 янв. 2022 г.
- CVE-2026-6604634Наблюдать
Expat Denial of Service via storeAtts() Quadratic Complexity
ВысокаяCVSS 8,7Эксплойта нетEPSS 0 %libexpat project · libexpat18 авг. 2026 г.
- CVE-2013-034033Наблюдать
expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler fun
СредняяCVSS 6,8Эксплойта нетEPSS 19 %libexpat project · libexpat21 янв. 2014 г.
- CVE-2015-128333Наблюдать
Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other prod
СредняяCVSS 6,8Эксплойта нетEPSS 18 %google · chrome22 июл. 2015 г.
- CVE-2017-923333Наблюдать
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite
ВысокаяCVSS 7,5Эксплойта нетEPSS 8 %libexpat project · libexpat25 июл. 2017 г.
- CVE-2022-4067433Наблюдать
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
ВысокаяCVSS 8,1Эксплойта нетEPSS 2 %libexpat project · libexpat14 сент. 2022 г.
- CVE-2018-2084332Наблюдать
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a h
ВысокаяCVSS 7,5Эксплойта нетEPSS 7 %libexpat project · libexpat24 июн. 2019 г.
- CVE-2019-1590332Наблюдать
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutiv
ВысокаяCVSS 7,5Эксплойта нетEPSS 6 %libexpat project · libexpat4 сент. 2019 г.
- CVE-2016-530032Наблюдать
The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial
ВысокаяCVSS 7,5Эксплойта нетEPSS 6 %canonical · ubuntu linux16 июн. 2016 г.
- CVE-2021-4614332Наблюдать
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
ВысокаяCVSS 7,8Proof of conceptEPSS 4 %libexpat project · libexpat6 янв. 2022 г.
- CVE-2022-2531431Наблюдать
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
ВысокаяCVSS 7,5Proof of conceptEPSS 4 %libexpat project · libexpat18 февр. 2022 г.