Skip to content

CVE-2026-102633 on Cyberus Linux 26.05

Aliases: CVE-2026-102633

Packages: expat

Status: Plausible

Advisory Information

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or denial of service.

Updates

2026-10-06 13:51 CEST

Metadata changes:

  • Status for package expat: “Plausible”

2026-10-06 13:46 CEST

Metadata changes:

  • Status for package expat: “New”