← Back

CVE-2026-25210

nvd nist
Published: Jan 30, 2026Modified: Jun 2, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.

Affected (1)

Libexpat Project
1 product
Libexpat
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Libexpat
Before 2.7.4

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (3)

Source: cve@mitre.org
Issue TrackingPatch
Source: cve@mitre.org
Patch
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.