Skip to content
COOEY

FAIL › dossier

libexpat project

VENDOR

Failure events
8
Zero-days
0
RCEs
0
On KEV
0
Critical
8
Worst shame
0
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 8
DATEEVENTSEVSUMMARY
2022-02-18 CVE-2022-25315 critical CVE-2022-25315: In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNa
2022-02-16 CVE-2022-25236 critical CVE-2022-25236: xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert names
2022-02-16 CVE-2022-25235 critical CVE-2022-25235: xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of e
2022-01-24 CVE-2022-23852 critical CVE-2022-23852: Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer
2022-01-10 CVE-2022-22822 critical CVE-2022-22822: addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer ove
2022-01-10 CVE-2022-22823 critical CVE-2022-22823: build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer ov
2022-01-10 CVE-2022-22824 critical CVE-2022-22824: defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an intege
2016-05-26 CVE-2016-0718 critical CVE-2016-0718: Expat allows context-dependent attackers to cause a denial of service (crash) or