Threats tagged 'ghsa-c6pw-vjr4-wwwr'

A signed integer overflow vulnerability exists in libexpat versions through 2.9.0 in the storeAtts() function within lib/xmlparse.c. This flaw allows attackers to cause out-of-bounds writes by supplying XML documents with an excessively large number of attributes, potentially leading to application crashes or heap memory corruption.