Libexpat · Libexpat · CVE-2026-56404
**Name of the Vulnerable Software and Affected Versions**
libexpat versions prior to 2.8.2
**Description**
An integer overflow exists in the `addBinding()` function. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of bits.
**Recommendations**
Update to version 2.8.2 or later.
As a temporary workaround, consider restricting the use of the `addBinding()` function until the update is applied.