Servers and applications
CVE-2025-59375
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
- Severity
- High 7.5
- Published
- 15 Sept 2025
- Last changed
- 19 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 2.7.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
ExpatServers and applications · cpe:a:libexpat_project:libexpat |
|