p PatchFirst

ALPINE-CVE-2026-102633

ALPINE-CVE-2026-102633

This page contains facts from public vulnerability sources. Check the original advisory before updating.

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or denial of service.

CVSS 5.9 · Medium · Fix available

Published
Updated

Stack: system

Affected products and versions

  • expat Alpine:v3.21

    Affected ranges
    • ECOSYSTEM: < 2.9.0-r0

    Update to 2.9.0-r0

  • expat Alpine:v3.22

    Affected ranges
    • ECOSYSTEM: < 2.9.0-r0

    Update to 2.9.0-r0

  • expat Alpine:v3.23

    Affected ranges
    • ECOSYSTEM: < 2.9.0-r0

    Update to 2.9.0-r0

  • expat Alpine:v3.24

    Affected ranges
    • ECOSYSTEM: < 2.9.0-r0

    Update to 2.9.0-r0

Original sources

Check your server →