CVE-2026-56412

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.8.2

Description An issue exists where XML TOK DATA CHARS is not considered in the doCdataSection() function. This leads to a lack of handler call depth tracking for various calls from within handlers during policy violations, which can result in a use-after-free condition. A use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Recommendations Update to version 2.8.2.