Buffer Overflow Vulnerability in libexpat Affects Multiple Versions

CVE-2026-25210

What is CVE-2026-25210?

The doContent function in libexpat versions prior to 2.7.4 is vulnerable due to a lack of integer overflow checks during tag buffer reallocation. This oversight can lead to improper buffer size determination, increasing the risk of buffer overflow attacks. Attackers could exploit this vulnerability to execute arbitrary code or disrupt service, making it critical for users to update to a patched version.

References