Threats tagged 'ghsa-v4h5-6r69-76p3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.2	CVE-2026-117610libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in High8.22026-10-28GCVE DatabaseCVE-2026-117610 A NULL pointer dereference vulnerability exists in libexpat through version 2.9.0 within the externalEntityInitProcessor2() function. This flaw mishandles the XML_TOK_NONE token from empty input, allowing attackers who control stream chunking to cause a crash by forcing an empty non-final first parse on an external entity subparser. Report on CVE-2026-117610 Vulnerability CWE-476 #ghsa-v4h5-6r69-76p3	GCVE Database	2026-10-28

Page 1 of 1