CVE-2026-25210

Description

In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.

Risk Information

Base Score

6.9

MODERATE

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

EPSS Score

Exploitation Probability

0.007

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2025-66382,CVE-2026-24515,CVE-2026-25210 are affected in Expat XML Parser 2.7.3	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-355530	Expat XML Parser (2.7.4)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234