CVE CATALOG

Back to catalog

DEBIAN-CVE-2026-56410 - debian/expat

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.

CWE-190 / CVSS 6.9 (MEDIUM)

Evidence
  • imported from OSV Debian, untriaged
History
  • 2026-10-28: pending-human-approval - bulk import