CVE-2026-56405
published 2026-06-21CVE-2026-56405: libexpat before 2.8.2 has an integer overflow in getAttributeId.
PriorityP432medium6.9CVSS 3.1
AVLACHPRNUINSUCHIHAL
EPSS
0.13%
2.2th percentile
libexpat before 2.8.2 has an integer overflow in getAttributeId.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ansible-automation-platform-26 | lightspeed-chatbot-rhel9 | — | — |
| ansible-automation-platform-27 | lightspeed-chatbot-rhel9 | — | — |
| debian | expat | — | — |
| exploit-intelligence-tech-preview | vulnerability-analysis-rhel9 | — | — |
| libexpat_project | libexpat | < 2.8.2 | 2.8.2 |
| rhoai | odh-llama-stack-core-rhel9 | — | — |
| rhoai | odh-mlflow-rhel9 | — | — |
| rhoai | odh-trustyai-garak-lls-provider-dsp-rhel9 | — | — |
| ubuntu | expat | — | — |
| ubuntu | libxmltok | — | — |
CVSS provenance
nvdv3.16.9MEDIUMCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
vendor_ubuntu7.5HIGH
vendor_redhat6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
libexpat before 2.8.2 has an integer overflow in getAttributeId.
ghsa_unreviewed·2026-06-21
CVE-2026-56405 [MEDIUM] CWE-190 libexpat before 2.8.2 has an integer overflow in getAttributeId.
libexpat before 2.8.2 has an integer overflow in getAttributeId.
VulDB
libexpat up to 2.8.1 integer overflow (EUVD-2026-38182)
vuldb·2026-06-21·CVSS 6.9
CVE-2026-56405 [MEDIUM] libexpat up to 2.8.1 integer overflow (EUVD-2026-38182)
A vulnerability, which was classified as problematic, has been found in libexpat up to 2.8.1. This vulnerability affects unknown code. Performing a manipulation results in integer overflow.
This vulnerability is cataloged as CVE-2026-56405. The attack must be initiated from a local position. There is no exploit available.
It is advisable to upgrade the affected component.
Ubuntu
libxmltok vulnerabilities
vendor_ubuntu·2026-10-05·CVSS 6.9
CVE-2026-56404 [MEDIUM] libxmltok vulnerabilities
Title: libxmltok vulnerabilities
Summary: libxmltok could be made to crash if it opened a specially crafted
file.
It was discovered that Expat, contained with the xmltok library did not
correctly handle certain integer arithmetic. If a user or automated
system were tricked into opening a specially crafted file, an attacker
could possibly cause a denial of service. (CVE-2026-56404, CVE-2026-56405)
Instructions: In general, a standard system update will make all the necessary changes.
Ubuntu
Expat vulnerabilities
vendor_ubuntu·2026-09-21·CVSS 7.5
CVE-2026-50219 [HIGH] Expat vulnerabilities
Title: Expat vulnerabilities
Summary: Several security issues were fixed in Expat.
It was discovered that Expat could be made to allocate large amounts of
memory when parsing a small crafted document. An attacker could possibly
use this issue to cause Expat to consume resources, leading to a denial of
service. This issue was only addressed in Ubuntu 24.04 LTS.
(CVE-2025-59375)
It was discovered that Expat incorrectly handled empty external parameter
entity content. An attacker could possibly use this issue to cause Expat to
crash, resulting in a denial of service. (CVE-2026-32776)
It was discovered that Expat incorrectly handled certain DTD content. An
attacker could possibly use this issue to cause Expat to enter an infinite
loop, resulting in a denial of service. (CVE-2026-32777)
It
Red Hat
libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow
vendor_redhat·2026-06-21·CVSS 6.9
CVE-2026-56405 [MEDIUM] CWE-190 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow
libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow
libexpat before 2.8.2 has an integer overflow in getAttributeId.
A flaw was found in libexpat. An integer overflow vulnerability exists within the `getAttributeId` function. This flaw could allow an attacker to potentially disclose sensitive information or execute arbitrary code, leading to a compromise of the system's integrity and confidentiality.
Statement: The moderate vulnerability in libexpat's `getAttributeId` function could allow a local attacker to achieve information disclosure or arbitrary code execution due to an integer overflow. The high attack complexity and local access required inherently mitigate the opportunity for successful exploitation. However, successful exploitation coul
No detection rules found.
No public exploits indexed.
2026-06-21
Published