Infinite Loop Vulnerability in libexpat by Expat XML Parser

CVE-2026-32777

What is CVE-2026-32777?

A vulnerability in libexpat versions prior to 2.7.5 allows attackers to exploit an infinite loop condition while parsing Document Type Definition (DTD) content, potentially leading to denial of service. This flaw highlights the importance of updating to secure software versions to mitigate risks associated with XML parsing functionalities.

References