Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Fleimkeipa

#27468of 53,632
9.3Total CVSS
Vulnerabilities · 1
PT-2022-1760
9.3
2022-01-08
Expat · Expat · CVE-2022-22827
**Name of the Vulnerable Software and Affected Versions** Expat (aka libexpat) versions prior to 2.4.3 **Description** The issue is related to an integer overflow in the `storeAtts` function in `xmlparse.c` of the Expat library. This could allow a remote attacker to execute arbitrary code. **Recommendations** For versions prior to 2.4.3, update to version 2.4.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `storeAtts` function in `xmlparse.c` until a patch is available.