libexpat project — Vulnerabilities & Security Advisories 26

The libexpat project provides a stream-oriented XML parser library widely used for parsing XML data in applications and systems. Historically, it has been susceptible to remote code execution vulnerabilities through buffer overflows and integer overflows in XML parsing functions, as well as denial-of-service conditions via crafted XML inputs. Cross-site scripting vulnerabilities have also been identified in applications using the library. While no major security incidents have been widely documented, the 8 CVEs on record highlight consistent exposure to memory corruption flaws. The library's C implementation and widespread integration into critical infrastructure make it a persistent target for exploitation, particularly through malformed XML payloads targeting parser logic.