Back to catalog

DEBIAN-CVE-2025-59375 - debian/expat

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CWE-770 / CVSS 7.5 (HIGH)

Evidence
  • imported from OSV Debian, untriaged
History
  • 2026-10-28: pending-human-approval - bulk import