PT-2026-39462 · Libexpat+2 · Libexpat+2

Hartwork

·

CVE-2026-45186

·

Published

2026-05-08

·

Updated

2026-09-11

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.8.1
Description The computational complexity of attribute name collision checks allows a denial of service when processing moderately sized crafted XML input.
Recommendations Update to version 2.8.1 or later.

Exploit

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-407

Related Identifiers

ALSA-2026:22715
ALSA-2026:22721
ALSA-2026:23230
AZL-86340
BDU:2026-08066
CLEANSTART-2026-HP19968
CLEANSTART-2026-ID74762
CLEANSTART-2026-LN45890
CLEANSTART-2026-MM40347
CLEANSTART-2026-OM32721
CLEANSTART-2026-UP30431
CLEANSTART-2026-XA09439
CLEANSTART-2026-ZL11893
CVE-2026-45186
ECHO-0089-929B-F00D
JLSEC-2026-1223
OESA-2026-2430
OESA-2026-2431
OESA-2026-2432
OESA-2026-2433
OESA-2026-2500
OPENSUSE-SU-2026:10787-1
OPENSUSE-SU-2026:11747-1
OPENSUSE-SU-2026:11756-1
RHSA-2026:22715
RHSA-2026:22721
RHSA-2026:23230
SUSE-SU-2026:3649-1

Affected Products

Ibm Aix
Rocky Linux
Libexpat