← Database

CVE-2022-23852

CRITICAL CVSS: 9.8 Published: 2022-01-24 Modified: 2026-06-17

Description

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.

Affected Platforms

Oracle Communications Metasolv SolutionSiemens Sinema Remote Connect ServerDebian Debian LinuxNetapp Clustered Data OntapNetapp Oncommand Workflow AutomationTenable NessusLibexpat Project Libexpat

Weakness Type

CWE-190, CWE-190

References