Integer Overflow in libexpat Could Lead to XML Parse Failure
CVE-2024-45492

9.8CRITICAL

Key Information:

Vendor

libexpat

Status
Libexpat
Vendor
CVE Published:
30 August 2024

What is CVE-2024-45492?

An integer overflow flaw exists in libexpat prior to version 2.6.3, specifically in the nextScaffoldPart function located in xmlparse.c. This vulnerability can be exploited on 32-bit platforms where the maximum value of unsigned integer (UINT_MAX) is equal to the maximum value of size type (SIZE_MAX). Attackers could leverage this flaw to manipulate input sizes, potentially leading to memory corruption and other unforeseen behavior in applications utilizing the affected versions of libexpat.

References

https://github.com/libexpat/libexpat/pull/892
https://github.com/libexpat/libexpat/issues/889

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.