PT-2026-5383 · Libexpat+4 · Libexpat+4

Sebastian Pipping

·

CVE-2026-25210

·

Publicado

2026-01-30

·

Atualizado

2026-08-21

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Nome do Software Vulnerável e Versões Afetadas libexpat versões anteriores a 2.7.4
Descrição A função doContent no libexpat não calcula corretamente o tamanho do buffer bufSize ao realocar memória para tags, devido à ausência de uma verificação de estouro de inteiro. Isso pode levar a possíveis problemas de gerenciamento de memória.
Recomendações Atualize o libexpat para a versão 2.7.4 ou posterior.

Exploit

Correção

DoS

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

AZL-75815
AZL-76340
BDU:2026-03635
CLEANSTART-2026-AF52025
CLEANSTART-2026-AG21538
CLEANSTART-2026-AO11810
CLEANSTART-2026-AX74442
CLEANSTART-2026-AY18527
CLEANSTART-2026-BW46578
CLEANSTART-2026-CC73064
CLEANSTART-2026-CH17958
CLEANSTART-2026-CL65461
CLEANSTART-2026-CN84623
CLEANSTART-2026-CO09549
CLEANSTART-2026-CP08056
CLEANSTART-2026-DB61851
CLEANSTART-2026-DJ93523
CLEANSTART-2026-DK70097
CLEANSTART-2026-DP35743
CLEANSTART-2026-DP59378
CLEANSTART-2026-DW56632
CLEANSTART-2026-EM10970
CLEANSTART-2026-EN67837
CLEANSTART-2026-EO57061
CLEANSTART-2026-FN44356
CLEANSTART-2026-GN22652
CLEANSTART-2026-GR41888
CLEANSTART-2026-GR86205
CLEANSTART-2026-GV99300
CLEANSTART-2026-GY48351
CLEANSTART-2026-HH39661
CLEANSTART-2026-HJ96712
CLEANSTART-2026-HL08143
CLEANSTART-2026-HM96194
CLEANSTART-2026-IB04141
CLEANSTART-2026-IJ23041
CLEANSTART-2026-IN87004
CLEANSTART-2026-IO64153
CLEANSTART-2026-JH41080
CLEANSTART-2026-JL41223
CLEANSTART-2026-JP09281
CLEANSTART-2026-JR82778
CLEANSTART-2026-KA21986
CLEANSTART-2026-KB11938
CLEANSTART-2026-KB52131
CLEANSTART-2026-KF75900
CLEANSTART-2026-KH40159
CLEANSTART-2026-KJ79497
CLEANSTART-2026-KW35511
CLEANSTART-2026-KX82113
CLEANSTART-2026-LB69194
CLEANSTART-2026-LF33811
CLEANSTART-2026-LQ42192
CLEANSTART-2026-LT34061
CLEANSTART-2026-NH93073
CLEANSTART-2026-NJ24264
CLEANSTART-2026-NM97614
CLEANSTART-2026-NN56899
CLEANSTART-2026-NV78596
CLEANSTART-2026-OF88781
CLEANSTART-2026-OH43332
CLEANSTART-2026-OV74385
CLEANSTART-2026-PD43534
CLEANSTART-2026-PH91954
CLEANSTART-2026-PK19530
CLEANSTART-2026-PN81558
CLEANSTART-2026-PO55014
CLEANSTART-2026-PV93827
CLEANSTART-2026-PX93187
CLEANSTART-2026-QC20347
CLEANSTART-2026-QM31011
CLEANSTART-2026-QP67751
CLEANSTART-2026-QT07988
CLEANSTART-2026-RO34407
CLEANSTART-2026-RO70091
CLEANSTART-2026-RR82368
CLEANSTART-2026-SZ14466
CLEANSTART-2026-TB28500
CLEANSTART-2026-TL29125
CLEANSTART-2026-TN71701
CLEANSTART-2026-TX47991
CLEANSTART-2026-UB19292
CLEANSTART-2026-UN47141
CLEANSTART-2026-UQ00642
CLEANSTART-2026-UV97144
CLEANSTART-2026-UZ82654
CLEANSTART-2026-VG07087
CLEANSTART-2026-VG64236
CLEANSTART-2026-WA05811
CLEANSTART-2026-WX95627
CLEANSTART-2026-WZ23371
CLEANSTART-2026-XH81128
CLEANSTART-2026-XQ59138
CLEANSTART-2026-XW50665
CLEANSTART-2026-YA20538
CLEANSTART-2026-YE08997
CLEANSTART-2026-YM06751
CLEANSTART-2026-YP34235
CLEANSTART-2026-ZD19143
CLEANSTART-2026-ZN10254
CLEANSTART-2026-ZN45188
CVE-2026-25210
ECHO-D167-D9FF-F755
MGASA-2026-0031
OESA-2026-1295
OESA-2026-1296
OESA-2026-1297
OESA-2026-1298
OESA-2026-1378
OESA-2026-1379
OPENSUSE-SU-2026:10144-1
OPENSUSE-SU-2026:20306-1
SUSE-SU-2026:0386-1
SUSE-SU-2026:0646-1
SUSE-SU-2026:0647-1
SUSE-SU-2026:0826-1
SUSE-SU-2026:20350-1
SUSE-SU-2026:20481-1
SUSE-SU-2026:20627-1
SUSE-SU-2026:20642-1
USN-8022-1
USN-8022-2
USN-8023-1

Produtos afetados

Ibm Aix
Linuxmint
Red Os
Ubuntu
Libexpat