CVE-2024-45492 is an integer overflow vulnerability in libexpat before version 2.6.3. The flaw exists in the nextScaffoldPart function in xmlparse.c, where on 32-bit platforms (where UINT_MAX equals SIZE_MAX), the m_groupSize variable can overflow. This can lead to memory corruption, impacting the confidentiality, integrity, and availability of applications using the affected library. The vulnerability has a CVSS 3.1 base score of 7.3, reflecting a network attack vector with low attack complexity, no privileges required, and no user interaction needed.

Successful exploitation of this integer overflow can result in memory corruption, which may allow an attacker to cause denial of service or potentially execute arbitrary code. The CVSS vector indicates impacts on confidentiality, integrity, and availability. However, no known exploits have been reported in the wild as of the publication date.

A fix is available in libexpat version 2.6.3. Users and maintainers should upgrade to version 2.6.3 or later to remediate this vulnerability. Patch status is confirmed by the affectedVersions data indicating versions before 2.6.3 are vulnerable. No vendor advisory content was provided, so check the official libexpat release notes or security advisories for confirmation and additional guidance.