DEBIAN-CVE-2026-72522 - debian/expat
libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.
CWE-125 / CVSS 6.2 (MEDIUM)
Evidence
- imported from OSV Debian, untriaged
History
- 2026-10-28: pending-human-approval - bulk import