Memory Management Flaw in Expat Library by libexpat
CVE-2021-45960
8.8HIGH
Key Information:
- Vendor
Libexpat Project
- Status
- Vendor
- CVE Published:
- 1 January 2022
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2021-45960?
A flaw in the Expat library (libexpat) prior to version 2.4.3 allows for improper memory reallocation due to a left shift operation in the storeAtts function. This issue can lead to insufficient memory allocation or incorrect freeing of memory, potentially exposing systems to stability issues and security risks. Users are encouraged to update to later versions to mitigate these vulnerabilities.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.