← Database

CVE-2024-45492

CRITICAL CVSS: 9.8 Published: 2024-08-30 Modified: 2026-06-17

Description

An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).

Affected Platforms

Libexpat Project Libexpat

Weakness Type

CWE-190, CWE-190

References