CVE-2026-56409

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.8.2

Description The xmlwf tool contains an integer overflow related to the output filename when the -d outputDir option is utilized. An integer overflow occurs when a mathematical operation results in a value that exceeds the maximum size of the integer type used to store it, potentially leading to memory corruption or crashes.

Recommendations Update to version 2.8.2 or later.