CVE-2024-45490

Description

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

Affected Platforms

Weakness Type

CWE-611, CWE-190

References

• https://github.com/libexpat/libexpat/issues/887
• https://github.com/libexpat/libexpat/pull/890
• http://seclists.org/fulldisclosure/2024/Dec/10
• http://seclists.org/fulldisclosure/2024/Dec/12
• http://seclists.org/fulldisclosure/2024/Dec/6
• http://seclists.org/fulldisclosure/2024/Dec/7