PT-2026-4328 · Libexpat+4 · Libexpat+4

Carnil + 1 · CVE-2026-24515 · Publicado 2026-01-01 · Atualizado 2026-07-21

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas Versões do libexpat anteriores à 2.7.4

Descrição O problema reside na função XML ExternalEntityParserCreate. Ela não copia corretamente os dados do usuário para manipuladores de codificação desconhecidos, potencialmente levando à corrupção de memória. Relatos indicam um impacto crítico em distribuições Linux e aplicações, com a possibilidade de Execução Remota de Código (RCE). O problema é descrito como uma falha de Entidade Externa XML (XXE).

Recomendações Versões anteriores à 2.7.4 devem ser atualizadas para a versão 2.7.4 ou posterior.

Exploit

Correção

DoS

RCE

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

AZL-75102

AZL-75216

BDU:2026-03634

CLEANSTART-2026-AF52025

CLEANSTART-2026-AG21538

CLEANSTART-2026-AO11810

CLEANSTART-2026-AX74442

CLEANSTART-2026-AY18527

CLEANSTART-2026-BW46578

CLEANSTART-2026-CC73064

CLEANSTART-2026-CH17958

CLEANSTART-2026-CL65461

CLEANSTART-2026-CN84623

CLEANSTART-2026-CO09549

CLEANSTART-2026-CP08056

CLEANSTART-2026-DB61851

CLEANSTART-2026-DJ93523

CLEANSTART-2026-DK70097

CLEANSTART-2026-DP35743

CLEANSTART-2026-DP59378

CLEANSTART-2026-DW56632

CLEANSTART-2026-EM10970

CLEANSTART-2026-EN67837

CLEANSTART-2026-EO57061

CLEANSTART-2026-FN44356

CLEANSTART-2026-GN22652

CLEANSTART-2026-GR41888

CLEANSTART-2026-GR86205

CLEANSTART-2026-GV99300

CLEANSTART-2026-GY48351

CLEANSTART-2026-HH39661

CLEANSTART-2026-HJ96712

CLEANSTART-2026-HL08143

CLEANSTART-2026-HM96194

CLEANSTART-2026-IB04141

CLEANSTART-2026-IJ23041

CLEANSTART-2026-IN87004

CLEANSTART-2026-IO64153

CLEANSTART-2026-JH41080

CLEANSTART-2026-JL41223

CLEANSTART-2026-JP09281

CLEANSTART-2026-JR82778

CLEANSTART-2026-KA21986

CLEANSTART-2026-KB11938

CLEANSTART-2026-KB52131

CLEANSTART-2026-KF75900

CLEANSTART-2026-KH40159

CLEANSTART-2026-KJ79497

CLEANSTART-2026-KW35511

CLEANSTART-2026-KX82113

CLEANSTART-2026-LB69194

CLEANSTART-2026-LF33811

CLEANSTART-2026-LQ42192

CLEANSTART-2026-LT34061

CLEANSTART-2026-NH93073

CLEANSTART-2026-NJ24264

CLEANSTART-2026-NM97614

CLEANSTART-2026-NN56899

CLEANSTART-2026-NV78596

CLEANSTART-2026-OF88781

CLEANSTART-2026-OH43332

CLEANSTART-2026-OV74385

CLEANSTART-2026-PD43534

CLEANSTART-2026-PH91954

CLEANSTART-2026-PK19530

CLEANSTART-2026-PN81558

CLEANSTART-2026-PO55014

CLEANSTART-2026-PV93827

CLEANSTART-2026-PX93187

CLEANSTART-2026-QC20347

CLEANSTART-2026-QM31011

CLEANSTART-2026-QP67751

CLEANSTART-2026-QT07988

CLEANSTART-2026-RO34407

CLEANSTART-2026-RO70091

CLEANSTART-2026-RR82368

CLEANSTART-2026-SZ14466

CLEANSTART-2026-TB28500

CLEANSTART-2026-TL29125

CLEANSTART-2026-TN71701

CLEANSTART-2026-TX47991

CLEANSTART-2026-UB19292

CLEANSTART-2026-UN47141

CLEANSTART-2026-UQ00642

CLEANSTART-2026-UV97144

CLEANSTART-2026-UZ82654

CLEANSTART-2026-VG07087

CLEANSTART-2026-VG64236

CLEANSTART-2026-WA05811

CLEANSTART-2026-WX95627

CLEANSTART-2026-WZ23371

CLEANSTART-2026-XH81128

CLEANSTART-2026-XQ59138

CLEANSTART-2026-XW50665

CLEANSTART-2026-YA20538

CLEANSTART-2026-YE08997

CLEANSTART-2026-YM06751

CLEANSTART-2026-YP34235

CLEANSTART-2026-ZD19143

CLEANSTART-2026-ZN10254

CLEANSTART-2026-ZN45188

CVE-2026-24515

ECHO-CBF6-E20A-84E9

MGASA-2026-0031

OESA-2026-1272

OESA-2026-1273

OESA-2026-1274

OESA-2026-1297

OESA-2026-1299

OPENSUSE-SU-2026:10144-1

OPENSUSE-SU-2026:20306-1

SUSE-SU-2026:0386-1

SUSE-SU-2026:0646-1

SUSE-SU-2026:0647-1

SUSE-SU-2026:0826-1

SUSE-SU-2026:20350-1

SUSE-SU-2026:20481-1

SUSE-SU-2026:20627-1

SUSE-SU-2026:20642-1

USN-8022-1

USN-8022-2

USN-8023-1

Produtos afetados

Ibm Aix

Linuxmint

Red Os

Ubuntu

Libexpat

Referências · 745

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24515.json · Exploit
• https://github.com/libexpat/libexpat/pull/1131 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PN81558.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TX47991.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PX93187.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YA20538.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NM97614.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YM06751.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YP34235.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QC20347.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NH93073.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ZN10254.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QT07988.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WA05811.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-VG64236.json · Nota