1 mentions in 7 days · 2 in 30 days · 2 total · first seen · last
libexpat 2.9.0 patches CVE-2026-77214 and CVE-2026-102633, including a 32-bit integer overflow.
Sebastian Pipping told oss-security that libexpat 2.9.0, also called Expat 2.9.0, fixes two vulnerabilities. CVE-2026-102633 is an integer overflow in expat_realloc on 32-bit platforms. CVE-2026-77214 adds validation of the len parameter against available buffer capacity in XML_ParseBuffer. The note does not say either flaw is being exploited.
libexpat 2.8.5 fixes CVE-2026-93990 by rejecting malformed UTF-16 that could be smuggled into applications.
Sebastian Pipping announced that libexpat 2.8.5, also called Expat 2.8.5, fixes CVE-2026-93990. The release rejects high UTF-16 surrogates that are not followed by a low surrogate. Previously, malformed UTF-16 could be passed into applications using Expat, where the application's handling could cause arbitrary damage. The note does not report observed exploitation.