CVE-2022-22823

Name of the Vulnerable Software and Affected Versions Expat versions prior to 2.4.3

Description The issue is related to an integer overflow in the build model function in xmlparse.c of the Expat library. This could allow a remote attacker to execute arbitrary code on the system by persuading a victim to open a specially-crafted file. The exploitation of this issue may enable an attacker to run arbitrary code.

Recommendations For versions prior to 2.4.3, update to version 2.4.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the build model function in xmlparse.c until a patch is available.