CVE-2026-4739
CVE-2026-4739 · Integer overflow vulnerabilities in InsightSoftwareConsortium/ITK
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK (Modules/ThirdParty/Expat/src/expat modules).This issue affects ITK: before 2.7.1.
CVSS 9.4 · Critical · EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
itk
- Versions
- ≥ 0, < 2.7.1: Affected (git)
Update to 2.7.1
insighttoolkit4 Debian:12
- Versions
- 4.13.3withdata-dfsg2-4
- 4.13.3withdata-dfsg2-4+deb12u1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit5 Debian:12
- Versions
- 5.2.1-5
- 5.2.1-5+deb12u1
- 5.3.0-1
- 5.3.0-2
- 5.3.0-3
- 5.3.0-4
- 5.3.0-5
- 5.3.0-6
- 5.3.0-7
- 5.3.0-9~0exp0
- 5.4.0-1
- 5.4.0-2
- 5.4.3-1
- 5.4.3-2
- 5.4.3-3
- 5.4.3-4
- 5.4.3-5
- 5.4.4-1
- 5.4.5-1
- 5.4.5-2
- 5.4.6-1
- 5.4.6-2
- 5.4.7-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit5 Debian:13
- Versions
- 5.4.3-5
- 5.4.4-1
- 5.4.5-1
- 5.4.5-2
- 5.4.6-1
- 5.4.6-2
- 5.4.7-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
insighttoolkit5 Debian:14
- Versions
- 5.4.3-5
- 5.4.4-1
- 5.4.5-1
- 5.4.5-2
- 5.4.6-1
- 5.4.6-2
- 5.4.7-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
matanza Ubuntu:20.04:LTS
- Versions
- 0.13+ds1-6
- 0.13+ds2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
matanza Ubuntu:22.04:LTS
- Versions
- 0.13+ds2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
matanza Ubuntu:24.04:LTS
- Versions
- 0.13+ds2-1
- 0.13+ds2-1build1
- 0.13+ds2-1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
cadaver Ubuntu:25.10
- Versions
- 0.26+dfsg-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
expat Ubuntu:25.10
- Versions
- 2.7.1-1
- 2.7.1-2
- 2.7.1-2ubuntu0.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
matanza Ubuntu:25.10
- Versions
- 0.13+ds2-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
swish-e Ubuntu:25.10
- Versions
- 2.4.7-6.3
- 2.4.7-6.3build1
- 2.4.7-7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tdom Ubuntu:25.10
- Versions
- 0.9.5.1-2
- 0.9.5.1-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wbxml2 Ubuntu:25.10
- Versions
- 0.11.10+dfsg-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xmlrpc-c Ubuntu:25.10
- Versions
- 1.59.03-7
- 1.59.03-9
- 1.59.03-10
- 1.59.03-10.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
matanza Ubuntu:26.10
- Versions
- 0.13+ds2-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
matanza Ubuntu:26.04:LTS
- Versions
- 0.13+ds2-2
- 0.13+ds2-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published