Denial of Service Vulnerability in Expat XML Parser

CVE-2025-66382

What is CVE-2025-66382?

A denial of service vulnerability exists in the Expat XML Parser, specifically in versions up to 2.7.3. This vulnerability can be exploited through the processing of a specially crafted file approximately 2 MiB in size, potentially causing significant delays in the system's response. This can result in extended processing times and may impact service availability. Users and administrators are encouraged to take appropriate measures to ensure the security of their systems against potential exploitation.

References