DEBIAN-CVE-2012-1148 - debian/expat
Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.
Evidence
- imported from OSV Debian, untriaged
History
- 2026-10-28: pending-human-approval - bulk import