ALPINE-CVE-2026-25210
ALPINE-CVE-2026-25210
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.
CVSS 7.8 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
expat Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
expat Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
expat Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
expat Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
expat Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0