← Database

CVE-2024-45491

CRITICAL CVSS: 9.8 Published: 2024-08-30 Modified: 2026-06-17

Description

An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).

Affected Platforms

Libexpat Project Libexpat

Weakness Type

CWE-190, CWE-190

References