CVE-2026-56409
published 2026-06-21CVE-2026-56409: xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.
PriorityP427medium6.5CVSS 3.1
AVLACHPRNUIRSUCHIHAL
EPSS
0.13%
3.3th percentile
xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| libexpat_project | libexpat | < 2.8.2 | 2.8.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.
ghsa_unreviewed·2026-06-21
CVE-2026-56409 [MEDIUM] CWE-190 xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.
xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.
VulDB
libexpat up to 2.8.1 integer overflow (EUVD-2026-38186)
vuldb·2026-06-21·CVSS 6.5
CVE-2026-56409 [MEDIUM] libexpat up to 2.8.1 integer overflow (EUVD-2026-38186)
A vulnerability was found in libexpat up to 2.8.1. It has been classified as problematic. The impacted element is an unknown function. This manipulation causes integer overflow.
This vulnerability appears as CVE-2026-56409. The attack requires local access. There is no available exploit.
Upgrading the affected component is recommended.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-21
Published