PT-2026-27317 · Expat+1 · Expat+1

Titan Team · Publicado 2026-03-24 · Atualizado 2026-05-05 · CVE-2026-4739

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/S:P/AU:Y/R:U/V:C/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions InsightSoftwareConsortium ITK versions prior to 2.7.1

Description An integer overflow or wraparound condition exists in the Expat parser within the ITK software. This issue is network-reachable and allows for automatable exploitation. The vulnerability is located in the expat modules under the Modules/ThirdParty/Expat/src directory.

Recommendations Update to version 2.7.1 or later.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2026-4739

Produtos afetados

Expat

Itk

Referências · 10

• https://github.com/InsightSoftwareConsortium/ITK/pull/5351 · Correção
• https://twitter.com/CVEarity/status/2036846712535531766 · Publicação no Twitter
• https://t.me/cveNotify/162259 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-4739 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-4739 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2026-4739 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-4739 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2026-4739 · Nota de Segurança
• https://ubuntu.com/security/CVE-2026-4739 · Aviso do Fabricante
• https://twitter.com/0dayPublishing/status/2036286706966466707 · Publicação no Twitter