PT-2026-51242 · Libexpat+1 · Libexpat+1

·

CVE-2026-56406

·

Published

2026-06-21

·

Updated

2026-08-31

CVSS v3.1

6.9

Medium

VectorAV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.8.2
Description An integer overflow occurs in the XML ParseBuffer() function because it lacks a specific check that is implemented in the XML Parse() function.
Recommendations Update to version 2.8.2 or later.

Exploit

Fix

DoS

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-90234
CVE-2026-56406
ECHO-8FDA-FCF5-F272
OESA-2026-2973
OESA-2026-2974
OESA-2026-2975
OESA-2026-2976
OPENSUSE-SU-2026:11584-1

Affected Products

Ibm Aix
Libexpat