PT-2025-46012 · Julia · Expat Jll

Published 2025-10-14 · Updated 2025-10-14

OSV

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML GetCurrentLineNumber (or XML GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

Related Identifiers

JLSEC-2025-41

Affected Products

Expat Jll

References · 60

• https://osv.dev/vulnerability/JLSEC-2025-41 · Vendor Advisory
• https://debian.org/security/2019/dsa-4571 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP · Vendor Advisory
• https://debian.org/security/2019/dsa-4530 · Vendor Advisory
• https://debian.org/security/2019/dsa-4549 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA · Vendor Advisory
• https://github.com/libexpat/libexpat/issues/317 · Note
• https://github.com/libexpat/libexpat/issues/342 · Note
• https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43 · Note
• https://github.com/libexpat/libexpat/pull/318 · Note
• https://security.netapp.com/advisory/ntap-20190926-0004 · Note
• https://access.redhat.com/errata/RHSA-2019:3756 · Note
• https://tenable.com/security/tns-2021-11 · Note
• http://seclists.org/fulldisclosure/2019/Dec/23 · Note