FAIL › dossier
libexpat
PRODUCTDossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 8
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2022-02-18 | CVE-2022-25315 | critical | CVE-2022-25315: In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNa |
| 2022-02-16 | CVE-2022-25236 | critical | CVE-2022-25236: xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert names |
| 2022-02-16 | CVE-2022-25235 | critical | CVE-2022-25235: xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of e |
| 2022-01-24 | CVE-2022-23852 | critical | CVE-2022-23852: Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer |
| 2022-01-10 | CVE-2022-22822 | critical | CVE-2022-22822: addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer ove |
| 2022-01-10 | CVE-2022-22823 | critical | CVE-2022-22823: build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer ov |
| 2022-01-10 | CVE-2022-22824 | critical | CVE-2022-22824: defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an intege |
| 2016-05-26 | CVE-2016-0718 | critical | CVE-2016-0718: Expat allows context-dependent attackers to cause a denial of service (crash) or |