The libexpat XML parsing library before version 2.7.5 contains a vulnerability classified as CWE-835 (Loop with Unreachable Exit Condition), which can cause an infinite loop when parsing Document Type Definition (DTD) content. This infinite loop can lead to a denial of service by exhausting processing resources. The vulnerability does not affect confidentiality or integrity but impacts availability. The CVSS 3.1 vector indicates local attack vector, low complexity, no privileges required, no user interaction, and unchanged scope.

Successful exploitation of this vulnerability can cause the libexpat parser to enter an infinite loop, resulting in denial of service conditions due to resource exhaustion. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor libexpat project advisories for updates. Until a fix is available, avoid parsing untrusted DTD content or implement external controls to limit resource consumption during XML parsing.