CVE-2026-56132

libexpat project / libexpat PUBLISHED

Description (CNA)

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

Affected (CNA)

Vendor / product	Versions
libexpat project / libexpat	affected 0 before 2.8.2

CWE

CWE-821

References

https://github.com/libexpat/libexpat/pull/1272

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.