CVE-2025-66382 In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of…

Description

In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
libexpat 2.7	premières → 2.7.5	Pas de correctif indiqué
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1	3.1.5 → dernières	Pas de correctif indiqué
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1	3.1.5 → dernières	Pas de correctif indiqué
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1	3.1.5 → dernières	Pas de correctif indiqué
RUGGEDCOM RST2428P 4.0	premières → < 4.0	4.0

Autres CVE de libexpat

Les 26 CVE de libexpat →

CVE-2026-76957 libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks 4.9 Moyenne CVE-2026-76956 In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy,… 5.9 Moyenne CVE-2026-66046 Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the… 8.7 Élevée CVE-2026-72522 libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the… 6.2 Moyenne