Servers and applications
CVE-2026-124317
libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16
- Severity
- Medium 6.3
- Published
- 7 Nov 2026
- Last changed
- 7 Nov 2026
- Added to UpHeron
- 7 Nov 2026
- Sources
- CVE Program
Affected software
| Software | Affected versions |
|---|---|
ExpatServers and applications · cna:libexpat|libexpat |
|
References
- CVE.org https://www.cve.org/CVERecord?id=CVE-2026-124317