Main
Vulnerability Database
Exploits
ID:12939 - Exploit for Protection mechanism failure in expat - CVE-2026-56412
ID:12939 - Exploit for Protection mechanism failure in expat - CVE-2026-56412
Published: August 21, 2026
Vulnerability identifier: #VU144350
Vulnerability risk: Medium
CVE-ID: CVE-2026-56412
CWE-ID: CWE-693
Exploitation vector: Remote access
Vulnerable software:
expat
LANTIME Operating System Firmware (LTOS)
openEuler
Anolis OS
Fedora
expat-help
expat-devel
expat-debugsource
expat-debuginfo
expat-doc
expat-static
mingw-expat
expat
LANTIME Operating System Firmware (LTOS)
openEuler
Anolis OS
Fedora
expat-help
expat-devel
expat-debugsource
expat-debuginfo
expat-doc
expat-static
mingw-expat
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to cause memory corruption.
The vulnerability exists due to missing control flow integrity checks in doCdataSection when handling XML_TOK_DATA_CHARS callbacks. A remote attacker can trigger unsafe handler calls to cause memory corruption.
This issue is described as a hole in the fix for CVE-2026-50219.
Remediation
Install security update from vendor's website.