Known vulnerabilities in expat-debugsource - page 2
Vendor:
openEuler
Software:
expat-debugsource
Software CPE:
cpe:2.3:o:openeuler:expat-debugsource:*:*:*:*:*:openeuler:*:*
Website:
https://www.openeuler.org/
Total vulnerabilities:
51
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
2.8.1-8
2.2.9-33
2.4.1-31
2.5.0-27
2.8.1-5
2.2.9-28
2.4.1-27
2.5.0-23
2.5.0-22
2.2.9-27
2.4.1-26
2.5.0-21
2.2.9-26
2.2.9-25
2.4.1-24
2.5.0-19
2.2.9-24
2.4.1-23
2.5.0-18
2.5.0-17
2.2.9-23
2.5.0-16
2.4.1-22
2.4.1-21
2.2.9-21
2.5.0-15
2.2.9-20
2.5.0-14
2.2.9-19
2.5.0-12
2.4.1-19
2.2.9-17
2.4.1-18
2.5.0-11
2.5.0-10
2.4.1-13
2.2.9-13
2.2.9-12
2.2.9-11
2.4.1-8
2.2.9-9
2.2.9-8
2.2.9-6
2.2.9-5
2.2.9-4
2.2.9-3
Vulnerabilities (51)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU124277 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-32777 |
CWE-835 | Medium | 2.2.9-23, 2.4.1-22, 2.5.0-17 | 24.03.2026 |
SB2026032435 SB2026032436 SB2026032437 and 26 more |
||
| #VU124274 - NULL Pointer Dereference CVE-2026-32776 |
CWE-476 | Medium | 2.2.9-23, 2.4.1-22, 2.5.0-17 | 24.03.2026 |
SB2026032435 SB2026032765 SB2026033028 and 23 more |
||
| #VU122268 - Integer overflow CVE-2026-25210 |
CWE-190 | High | 2.2.9-21, 2.4.1-21, 2.5.0-15 | 03.02.2026 |
SB2026020364 SB20260205121 SB2026020611 and 23 more |
||
| #VU122267 - NULL Pointer Dereference CVE-2026-24515 |
CWE-476 | Medium | 2.2.9-20, 2.4.1-21, 2.5.0-14, 2.5.0-15 | 03.02.2026 |
SB2026020364 SB2026020367 SB2026020368 and 19 more |
||
| #VU115751 - Resource exhaustion CVE-2025-59375 |
CWE-400 | Medium | 2.2.9-17, 2.4.1-18, 2.5.0-10, 2.5.0-11 | 17.09.2025 |
SB2025091783 SB2025091789 SB2025091790 and 112 more |
||
| #VU105723 - Stack-based buffer overflow CVE-2024-8176 |
CWE-121 | High | 2.2.9-19, 2.4.1-19, 2.5.0-12 | 14.03.2025 |
SB2025031426 SB2025031429 SB2025031430 and 105 more |
||
| #VU99614 - Improper input validation CVE-2024-50602 |
CWE-20 | Medium | 2.4.1-13 | 01.11.2024 |
SB2024110155 SB2024110182 SB2024110534 and 98 more |
||
| #VU96899 - Integer overflow CVE-2024-45492 |
CWE-190 | High | 2.4.1-13 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 108 more |
||
| #VU96898 - Integer overflow CVE-2024-45491 |
CWE-190 | High | 2.4.1-13 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 106 more |
||
| #VU96897 - Buffer Underwrite ('Buffer Underflow') CVE-2024-45490 |
CWE-124 | High | 2.2.9-13 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 113 more |
||
| #VU87337 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-28757 |
CWE-611 | Medium | 2.2.9-11 | 11.03.2024 |
SB2024031135 SB2024031143 SB2024031144 and 75 more |
||
| #VU86231 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') CVE-2023-52426 |
CWE-776 | Medium | 2.2.9-11 | 07.02.2024 |
SB2024020750 SB2024020754 SB2024020765 and 23 more |
||
| #VU86230 - Resource exhaustion CVE-2023-52425 |
CWE-400 | Medium | 2.2.9-12 | 07.02.2024 |
SB2024020750 SB2024020754 SB2024020765 and 120 more |
||
| #VU68718 - Use After Free CVE-2022-43680 |
CWE-416 | Medium | 2.2.9-9 | 25.10.2022 |
SB2022102560 SB2022102566 SB2022103010 and 99 more |
||
| #VU67532 - Use After Free CVE-2022-40674 |
CWE-416 | High | 2.2.9-8 | 21.09.2022 |
SB2022092118 SB2022092119 SB2022092317 and 111 more |
||
| #VU60739 - Integer overflow CVE-2022-25315 |
CWE-190 | High | 2.2.9-6, 2.4.1-8 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 99 more |
||
| #VU60738 - Integer overflow CVE-2022-25314 |
CWE-190 | Medium | 2.2.9-6, 2.4.1-8 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 68 more |
||
| #VU60737 - Stack-based buffer overflow CVE-2022-25313 |
CWE-121 | High | 2.2.9-6, 2.4.1-8 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 64 more |
||
| #VU60736 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25235 |
CWE-94 | High | 2.2.9-6, 2.4.1-8 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 106 more |
||
| #VU60733 - Improper input validation CVE-2022-25236 |
CWE-20 | Medium | 2.2.9-6, 2.4.1-8 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 109 more |
Showing elements 21 - 40 out of 51