Known vulnerabilities in mingw-expat
Vendor:
Fedoraproject
Software:
mingw-expat
Software CPE:
cpe:2.3:o:fedoraproject:mingw-expat:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
26
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
2.8.4-1.fc44
2.8.4-1.fc43
2.8.4-1.fc45
2.8.3-1.fc45
2.8.3-1.fc43
2.8.3-1.fc44
2.8.2-1.fc43
2.8.2-1.fc44
2.8.1-1.fc44
2.8.1-1.fc43
2.7.5-1.fc42
2.7.5-1.fc43
2.7.5-1.fc44
2.7.4-1.fc42
2.7.4-1.fc43
2.7.2-1.fc42
2.7.2-1.fc43
2.7.2-1.fc41
2.5.0-1.fc36
2.5.0-1.fc35
2.5.0-1.fc37
2.4.9-1.fc37
2.4.9-1.fc35
2.4.9-1.fc36
2.4.6-1.fc35
2.4.6-1.fc34
2.4.4-1.fc35
2.4.4-1.fc34
2.6.4-1.fc40
2.6.4-1.fc41
2.6.3-2.fc40
2.6.3-2.fc41
2.6.3-2.fc39
2.6.3-1.fc41
2.6.3-1.fc40
2.6.3-1.fc39
2.6.1-1.fc38
2.6.1-1.fc40
2.6.1-1.fc39
2.6.0-1.fc39
2.6.0-1.fc38
Vulnerabilities (26)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU149951 - Out-of-bounds read CVE-2026-72522 |
CWE-125 | Medium | 2.8.3-1.fc43, 2.8.3-1.fc44, 2.8.3-1.fc45 | 15.09.2026 |
SB2026091529 SB2026091539 SB2026091540 and 9 more |
||
| #VU149950 - Use After Free CVE-2026-76957 |
CWE-416 | Medium | 2.8.4-1.fc43, 2.8.4-1.fc44, 2.8.4-1.fc45 | 15.09.2026 |
SB2026091530 SB2026091543 SB2026091544 and 7 more |
||
| #VU149948 - Unchecked Return Value CVE-2026-76956 |
CWE-252 | Medium | 2.8.4-1.fc43, 2.8.4-1.fc44, 2.8.4-1.fc45 | 15.09.2026 |
SB2026091530 SB2026091543 SB2026091544 and 1 more |
||
| #VU144338 - Protection Mechanism Failure CVE-2026-50219 |
CWE-693 | Medium | 2.8.2-1.fc43, 2.8.2-1.fc44 | 19.08.2026 |
SB2026081992 SB2026081995 SB2026081997 and 20 more |
||
| #VU144340 - Out-of-bounds write CVE-2026-56132 |
CWE-787 | High | 2.8.2-1.fc43, 2.8.2-1.fc44 | 19.08.2026 |
SB2026081992 SB2026081995 SB2026081997 and 9 more |
||
| #VU144350 - Protection Mechanism Failure CVE-2026-56412 |
CWE-693 | Medium | 2.8.2-1.fc43, 2.8.2-1.fc44 | 19.08.2026 |
SB2026081992 SB2026081995 SB2026081997 and 13 more |
||
| #VU128246 - Insufficient Entropy CVE-2026-41080 |
CWE-331 | Low | 2.8.1-1.fc43, 2.8.1-1.fc44 | 27.04.2026 |
SB20260427193 SB2026051240 SB2026051270 and 17 more |
||
| #VU124277 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-32777 |
CWE-835 | Medium | 2.7.5-1.fc42, 2.7.5-1.fc43, 2.7.5-1.fc44 | 24.03.2026 |
SB2026032435 SB2026032436 SB2026032437 and 26 more |
||
| #VU122267 - NULL Pointer Dereference CVE-2026-24515 |
CWE-476 | Medium | 2.7.4-1.fc42, 2.7.4-1.fc43 | 03.02.2026 |
SB2026020364 SB2026020367 SB2026020368 and 19 more |
||
| #VU115751 - Resource exhaustion CVE-2025-59375 |
CWE-400 | Medium | 2.7.2-1.fc41, 2.7.2-1.fc42, 2.7.2-1.fc43 | 17.09.2025 |
SB2025091783 SB2025091789 SB2025091790 and 111 more |
||
| #VU99614 - Improper input validation CVE-2024-50602 |
CWE-20 | Medium | 2.6.3-2.fc39, 2.6.3-2.fc40, 2.6.3-2.fc41, 2.6.4-1.fc40, 2.6.4-1.fc41 | 01.11.2024 |
SB2024110155 SB2024110182 SB2024110534 and 98 more |
||
| #VU96899 - Integer overflow CVE-2024-45492 |
CWE-190 | High | 2.6.3-1.fc39, 2.6.3-1.fc40, 2.6.3-1.fc41 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 108 more |
||
| #VU96898 - Integer overflow CVE-2024-45491 |
CWE-190 | High | 2.6.3-1.fc39, 2.6.3-1.fc40, 2.6.3-1.fc41 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 106 more |
||
| #VU96897 - Buffer Underwrite ('Buffer Underflow') CVE-2024-45490 |
CWE-124 | High | 2.6.3-1.fc39, 2.6.3-1.fc40, 2.6.3-1.fc41 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 113 more |
||
| #VU87337 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-28757 |
CWE-611 | Medium | 2.6.1-1.fc38, 2.6.1-1.fc39, 2.6.1-1.fc40 | 11.03.2024 |
SB2024031135 SB2024031143 SB2024031144 and 75 more |
||
| #VU86231 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') CVE-2023-52426 |
CWE-776 | Medium | 2.6.0-1.fc38, 2.6.0-1.fc39 | 07.02.2024 |
SB2024020750 SB2024020754 SB2024020765 and 23 more |
||
| #VU86230 - Resource exhaustion CVE-2023-52425 |
CWE-400 | Medium | 2.6.0-1.fc38, 2.6.0-1.fc39 | 07.02.2024 |
SB2024020750 SB2024020754 SB2024020765 and 120 more |
||
| #VU68718 - Use After Free CVE-2022-43680 |
CWE-416 | Medium | 2.5.0-1.fc35, 2.5.0-1.fc36, 2.5.0-1.fc37 | 25.10.2022 |
SB2022102560 SB2022102566 SB2022103010 and 99 more |
||
| #VU67532 - Use After Free CVE-2022-40674 |
CWE-416 | High | 2.4.9-1.fc35, 2.4.9-1.fc36, 2.4.9-1.fc37 | 21.09.2022 |
SB2022092118 SB2022092119 SB2022092317 and 111 more |
||
| #VU67341 - Out-of-bounds read CVE-2022-30674 |
CWE-125 | Low | 2.4.9-1.fc35, 2.4.9-1.fc36, 2.4.9-1.fc37 | 14.09.2022 |
SB2022091445 SB2022102162 SB2022102163 and 1 more |
Showing elements 1 - 20 out of 26