Integer Overflow Vulnerability in libexpat Affected by Vendor Issues
CVE-2026-56404

6.9MEDIUM

Key Information:

Vendor: Libexpat Project
Status: Libexpat
Vendor: CVE Published:; 21 June 2026

🔔 Create Libexpat Project Vulnerability Alert

What is CVE-2026-56404?

An integer overflow exists in libexpat prior to version 2.8.2, affecting its ability to manage bindings properly. This can potentially lead to unexpected behavior and security issues. Users of affected versions should upgrade to mitigate this vulnerability.

Affected Version(s)

libexpat 0 < 2.8.2

References

https://github.com/libexpat/libexpat/pull/1249

CVSS V3.1

Score:

6.9

Severity:

MEDIUM

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

High

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 21, 2026
Vulnerability Reserved
Jun 21, 2026

CVE-2026-56404 Data

JSON