SB20260819118 - openEuler 22.03 LTS SP4 update for expat

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260819118

SB20260819118 - openEuler 22.03 LTS SP4 update for expat

Published: August 19, 2026

Security Bulletin ID SB20260819118
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 11
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 11 vulnerabilities.


1) Integer overflow (CVE-ID: CVE-2026-56403)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to an integer overflow in storeAtts when parsing XML attributes. A remote attacker can supply crafted XML input to cause memory corruption.


2) Integer overflow (CVE-ID: CVE-2026-56404)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to an integer overflow in addBinding when processing XML data. A remote attacker can supply crafted XML input to cause memory corruption.


3) Integer overflow (CVE-ID: CVE-2026-56405)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to an integer overflow in getAttributeId when parsing XML attributes. A remote attacker can supply crafted XML input to cause memory corruption.


4) Integer overflow (CVE-ID: CVE-2026-56406)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to an integer overflow in XML_ParseBuffer when parsing buffered XML input. A remote attacker can supply crafted XML input to cause memory corruption.


5) Integer overflow (CVE-ID: CVE-2026-56407)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to an integer overflow in textLen handling when parsing XML data. A remote attacker can supply crafted XML input to cause memory corruption.


6) Integer overflow (CVE-ID: CVE-2026-56408)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to an integer overflow in copyString when copying string data. A remote attacker can supply crafted XML input to cause memory corruption.


7) Integer overflow (CVE-ID: CVE-2026-56409)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to an integer overflow in the xmlwf output path join logic when joining output paths. A remote attacker can supply crafted input to cause memory corruption.

This issue affects the xmlwf tool.


8) Integer overflow (CVE-ID: CVE-2026-56410)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to an integer overflow in xmlwf resolveSystemId when resolving system identifiers. A remote attacker can supply crafted input to cause memory corruption.

This issue affects the xmlwf tool.


9) Integer overflow (CVE-ID: CVE-2026-56411)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to an integer overflow in xmlwf notation list allocation when allocating notation list memory. A remote attacker can supply crafted input to cause memory corruption.

This issue affects the xmlwf tool.


10) Protection mechanism failure (CVE-ID: CVE-2026-56412)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to missing control flow integrity checks in doCdataSection when handling XML_TOK_DATA_CHARS callbacks. A remote attacker can trigger unsafe handler calls to cause memory corruption.

This issue is described as a hole in the fix for CVE-2026-50219.


11) Protection mechanism failure (CVE-ID: CVE-2026-50219)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to missing control flow integrity checks in XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, and XML_ParserReset when these functions are called reentrantly from bindings or callbacks. A remote attacker can trigger unsafe parser API calls to cause memory corruption.

The issue is described as relevant to language bindings.


Remediation

Install update from vendor's website.

References