PT-2026-25631

CVE-2026-32777

·

Published

2026-01-01

·

Updated

2026-10-27

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.7.5
Description The software contains a flaw where parsing DTD content can lead to an infinite loop.
Recommendations Update libexpat to version 2.7.5 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
AZL-79859
ECHO-1645-A8DE-A79E
MGASA-2026-0061
OESA-2026-1736
OESA-2026-1882
OESA-2026-1883
OESA-2026-1884
OESA-2026-1885
OESA-2026-1886
OPENSUSE-SU-2026:10466-1
OPENSUSE-SU-2026:10620-1
OPENSUSE-SU-2026:10642-1
OPENSUSE-SU-2026:20448-1
OPENSUSE-SU-2026:20674-1
OPENSUSE-SU-2026:20769-1
OPENSUSE-SU-2026:22139-1
OPENSUSE-SU-2026:22177-1
SUSE-SU-2026:1137-1
SUSE-SU-2026:1159-1
SUSE-SU-2026:1166-1
SUSE-SU-2026:1352-1
SUSE-SU-2026:1742-1
SUSE-SU-2026:1817-1
SUSE-SU-2026:1870-1
SUSE-SU-2026:1956-1
SUSE-SU-2026:20963-1
SUSE-SU-2026:20985-1
SUSE-SU-2026:21031-1
SUSE-SU-2026:21062-1
SUSE-SU-2026:21545-1
SUSE-SU-2026:24260-1
SUSE-SU-2026:24323-1
SUSE-SU-2026:24460-1
SUSE-SU-2026:24469-1
SUSE-SU-2026:24554-1
SUSE-SU-2026:4615-1
SUSE-SU-2026:4619-1
SUSE-SU-2026:4623-1
SUSE-SU-2026:4736-1
SUSE-SU-2026:4806-1
SUSE-SU-2026:4834-1
USN-8790-1
Found an issue in the description? Have something to add? Feel free to write us 👾