libexpat

2 known vulnerabilities in libexpat, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-102633 CVSS 8.2 high libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when…
  • CVE-2026-93990 CVSS 8.7 high Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16…