CVE-2022-25314

Name of the Vulnerable Software and Affected Versions Expat (aka libexpat) versions prior to 2.4.5

Description The issue is related to an integer overflow in the copyString function of the Expat library. This could allow a remote attacker to cause a denial of service by sending a specially crafted request. The vulnerability may also lead to memory corruption and potentially allow an attacker to execute arbitrary code on the system.

Recommendations For versions prior to 2.4.5, update to version 2.4.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the copyString function until a patch is available. Avoid using the Expat library to parse specially crafted files or data that could trigger the integer overflow in the copyString function.