Known vulnerabilities in expat 1.95.1

Software: expat
Version: 1.95.1
Software CPE: cpe:2.3:a:libexpat_org:libexpat:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 11
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting expat version 1.95.1 expat 1.95.1 is affected by 11 vulnerabilities: 2 high, 7 medium, 2 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124278 - NULL Pointer Dereference
CVE-2026-32778
CWE-476 Low
No
No
2.7.5 24.03.2026 SB2026032435
SB2026033028
SB2026033199
and 14 more
#VU124277 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-32777
CWE-835 Medium
No
No
2.7.5 24.03.2026 SB2026032435
SB2026032436
SB2026032437
and 22 more
#VU124274 - NULL Pointer Dereference
CVE-2026-32776
CWE-476 Medium
No
No
2.7.5 24.03.2026 SB2026032435
SB2026032765
SB2026033028
and 19 more
#VU68718 - Use After Free
CVE-2022-43680
CWE-416 Medium
No
No
2.5.0 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 98 more
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
2.4.5 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more
#VU60737 - Stack-based buffer overflow
CVE-2022-25313
CWE-121 High
No
No
2.4.5 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 64 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235
CWE-94 High
No
No
2.4.5 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236
CWE-20 Medium
No
No
2.4.5 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU18923 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20843
CWE-611 Medium
Public exploit available
No
2.2.7 27.06.2019 SB2019062808
SB2019070104
SB2019072102
and 30 more
#VU7242 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-9233
CWE-611 Low
No
No
- 25.06.2017 SB2017062501
SB2017062610
SB2017062502
and 16 more
#VU42119 - Resource exhaustion
CVE-2013-0340
CWE-400 Medium
No
No
2.1.0 21.01.2014 SB2014012103
SB2017011129
SB2021052301
and 16 more