Dynamic Memory Allocation Vulnerability in Expat by Libexpat

CVE-2025-59375

What is CVE-2025-59375?

The Expat library, used for parsing XML, is susceptible to vulnerabilities that allow attackers to initiate large dynamic memory allocations by sending crafted small documents for parsing. This flaw can lead to significant memory consumption and potentially disrupt service availability. Users of Expat versions before 2.7.2 should take immediate steps to update their software to mitigate this issue.

References