Denial of Service Vulnerability in Expat XML Parser
CVE-2025-66382

2.9LOW

Key Information:

Vendor

Libexpat Project

Status
Libexpat
Vendor
CVE Published:
28 November 2025

What is CVE-2025-66382?

A denial of service vulnerability exists in the Expat XML Parser, specifically in versions up to 2.7.3. This vulnerability can be exploited through the processing of a specially crafted file approximately 2 MiB in size, potentially causing significant delays in the system's response. This can result in extended processing times and may impact service availability. Users and administrators are encouraged to take appropriate measures to ensure the security of their systems against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

libexpat 0 <= 2.7.3

References

https://github.com/libexpat/libexpat/issues/1076

CVSS V3.1

Score:
2.9
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.