Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

libexpat — Vulnerabilities & Security Advisories 34

All 34 CVE vulnerabilities found in libexpat, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security advisories and vulnerability reports specifically for the libexpat XML parsing library developed by the Expat project, categorized under various weakness types such as buffer overflows and XML entity expansion issues. The collection encompasses historical and recent findings spanning from the library's initial release in the late 1990s through the most current patch cycles, providing a comprehensive timeline of identified security flaws. Visitors can utilize this resource to track official vendor advisories, understand the prevalence and impact of specific weakness classes like improper input validation within XML parsers, or examine the complete vulnerability history of the libexpat product to assess long-term security posture. The data presented here serves as a centralized reference for security researchers, system administrators, and developers who need to verify the status of known issues or correlate specific weaknesses with affected library versions without navigating disparate sources. By consolidating these records, the page facilitates efficient risk assessment and helps organizations maintain accurate inventories of potential threats associated with their XML processing dependencies. All entries are sourced from trusted public databases and vendor announcements, ensuring the information remains factual and directly relevant to the technical community managing this widely used open-source component.

Vendor: libexpat project

CVE ID Title CVSS Severity Published
CVE-2026-118370 libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes CWE-190 5.9 Medium 2026-10-28
CVE-2026-117610 libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser CWE-476 5.9 Medium 2026-10-28
CVE-2026-115506 libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay CWE-776 7.5 High 2026-10-22
CVE-2026-113351 libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset CWE-909 5.9 Medium 2026-10-20
CVE-2026-77214 libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer CWE-125 8.2 High 2026-10-07
CVE-2026-102633 libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc CWE-190 5.9 Medium 2026-09-29
CVE-2026-93990 Expat before 2.8.5 Malformed UTF-16 Acceptance via Unchecked Surrogate CWE-176 7.5 High 2026-09-19
CVE-2026-76641 Expat Out-of-Bounds Read via dtdCopy CWE-125 7.5 High 2026-08-20
CVE-2026-76957 libexpat 资源管理错误漏洞 CWE-416 4.9 Medium 2026-08-20
CVE-2026-76956 libexpat 异常处理不当漏洞 CWE-394 5.9 Medium 2026-08-20
CVE-2026-66046 Expat Denial of Service via storeAtts() Quadratic Complexity CWE-407 7.5 High 2026-08-18
CVE-2026-72522 Expat 缓冲区错误漏洞 CWE-125 6.2 Medium 2026-08-10
CVE-2026-56412 libexpat project libexpat 资源管理错误漏洞 CWE-416 4.9 Medium 2026-06-21
CVE-2026-56411 libexpat project libexpat 数字错误漏洞 CWE-190 6.9 Medium 2026-06-21
CVE-2026-56410 libexpat project libexpat 数字错误漏洞 CWE-190 6.9 Medium 2026-06-21
CVE-2026-56409 libexpat project libexpat 数字错误漏洞 CWE-190 6.5 Medium 2026-06-21
CVE-2026-56408 libexpat project libexpat 数字错误漏洞 CWE-190 6.9 Medium 2026-06-21
CVE-2026-56407 libexpat project libexpat 数字错误漏洞 CWE-190 6.9 Medium 2026-06-21
CVE-2026-56406 libexpat project libexpat 数字错误漏洞 CWE-190 6.9 Medium 2026-06-21
CVE-2026-56405 libexpat project libexpat 数字错误漏洞 CWE-190 6.9 Medium 2026-06-21
CVE-2026-56404 libexpat project libexpat 数字错误漏洞 CWE-190 6.9 Medium 2026-06-21
CVE-2026-56403 libexpat project libexpat 数字错误漏洞 CWE-190 6.9 Medium 2026-06-21
CVE-2026-56132 libexpat project libexpat 竞争条件问题漏洞 CWE-821 6.9 Medium 2026-06-19
CVE-2026-56131 libexpat project libexpat 资源管理错误漏洞 CWE-416 4.9 Medium 2026-06-19
CVE-2026-50219 libexpat 资源管理错误漏洞 CWE-416 4.9 Medium 2026-06-04
CVE-2026-45186 libexpat 安全漏洞 CWE-407 2.9 Low 2026-05-10
CVE-2026-41080 libexpat 安全漏洞 CWE-331 2.9 Low 2026-04-16
CVE-2026-32778 libexpat 代码问题漏洞 CWE-476 2.9 Low 2026-03-16
CVE-2026-32777 libexpat 安全漏洞 CWE-835 4.0 Medium 2026-03-16
CVE-2026-32776 libexpat 代码问题漏洞 CWE-476 4.0 Medium 2026-03-16

All 34 known CVE vulnerabilities affecting libexpat with full Chinese analysis, references, and POCs where available.