Search: CVE-2026-77214

CVE-2026-77214 is a heap buffer over-read vulnerability in libexpat versions up to 2.8.5. The flaw occurs in xmlparse.c where XML_ParseBuffer advances the parse buffer end using a caller-supplied length without validating it against the allocated buffer size. This can cause out-of-bounds reads of heap memory during XML parsing, potentially disclosing sensitive pointers that could aid in bypassing ASLR and enable further exploitation.