CVE-2024-50602

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.6.4

Description The issue is related to the XML ResumeParser function in the libexpat library, which can cause a crash due to insufficient checking of unusual or exceptional states. This can be exploited by a remote attacker to cause a denial of service. The XML StopParser function can stop or suspend an unstarted parser, leading to the crash.

Recommendations For libexpat versions prior to 2.6.4, update to version 2.6.4 or later to resolve the issue. As a temporary workaround, consider disabling the XML ResumeParser function until a patch is available. Restrict access to the XML StopParser function to minimize the risk of exploitation.