Known vulnerabilities in expat 2.2.9

Software: expat
Version: 2.2.9
Software CPE: cpe:2.3:a:libexpat_org:libexpat:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 33
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting expat version 2.2.9 expat 2.2.9 is affected by 33 vulnerabilities: 18 high, 13 medium, 2 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128246 - Insufficient Entropy
CVE-2026-41080
CWE-331 Low
No
No
2.8.0 27.04.2026 SB20260427193
SB2026051240
SB2026051270
and 13 more
#VU124278 - NULL Pointer Dereference
CVE-2026-32778
CWE-476 Low
No
No
2.7.5 24.03.2026 SB2026032435
SB2026033028
SB2026033199
and 13 more
#VU124277 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-32777
CWE-835 Medium
No
No
2.7.5 24.03.2026 SB2026032435
SB2026032436
SB2026032437
and 21 more
#VU124274 - NULL Pointer Dereference
CVE-2026-32776
CWE-476 Medium
No
No
2.7.5 24.03.2026 SB2026032435
SB2026032765
SB2026033028
and 18 more
#VU122269 - Resource exhaustion
CVE-2025-66382
CWE-400 Medium
No
No
2.7.4 03.02.2026 SB2026020364
SB2026041642
#VU122268 - Integer overflow
CVE-2026-25210
CWE-190 High
No
No
2.7.4 03.02.2026 SB2026020364
SB20260205121
SB2026020611
and 19 more
#VU122267 - NULL Pointer Dereference
CVE-2026-24515
CWE-476 Medium
No
No
2.7.4 03.02.2026 SB2026020364
SB2026020367
SB2026020368
and 17 more
#VU115751 - Resource exhaustion
CVE-2025-59375
CWE-400 Medium
No
No
2.7.2 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 106 more
#VU105723 - Stack-based buffer overflow
CVE-2024-8176
CWE-121 High
No
No
2.7.0 14.03.2025 SB2025031426
SB2025031429
SB2025031430
and 105 more
#VU99614 - Improper input validation
CVE-2024-50602
CWE-20 Medium
No
No
2.6.4 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU96899 - Integer overflow
CVE-2024-45492
CWE-190 High
No
No
2.6.3 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 108 more
#VU96898 - Integer overflow
CVE-2024-45491
CWE-190 High
No
No
2.6.3 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 106 more
#VU96897 - Buffer Underwrite ('Buffer Underflow')
CVE-2024-45490
CWE-124 High
No
No
2.6.3 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 113 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757
CWE-611 Medium
No
No
2.6.2 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 72 more
#VU86231 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2023-52426
CWE-776 Medium
No
No
2.6.0 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 22 more
#VU86230 - Resource exhaustion
CVE-2023-52425
CWE-400 Medium
No
No
2.6.0 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 118 more
#VU68718 - Use After Free
CVE-2022-43680
CWE-416 Medium
No
No
2.5.0 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 97 more
#VU67532 - Use After Free
CVE-2022-40674
CWE-416 High
No
No
2.4.9 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU60739 - Integer overflow
CVE-2022-25315
CWE-190 High
No
No
2.4.5 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60738 - Integer overflow
CVE-2022-25314
CWE-190 Medium
No
No
2.4.5 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 68 more


Showing elements 1 - 20 out of 33