CVE-2026-117610

expat: expat: Denial of Service via NULL pointer dereference in external entity parsing

expat

libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream chunking can force an empty non-final first parse on an external entity subparser, causing a later parse to crash the application.

28. Okt 2026

Ausgewertete Quellen

• Red Hat
  Red Hat
• Hersteller
  https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser
• NVD
  CVE-2026-117610