Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-18356
HistoryFeb 21, 2022 - 12:00 a.m.

Expat has an unspecified vulnerability (CNVD-2022-18356)

2022-02-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
27
expat
xml parser
vulnerability
cnvd-2022-18356
encoding validations
xmltok_impl.c

EPSS

0.011

Percentile

84.5%

Expat is a fast streaming XML parser written in C. A security vulnerability exists in Expat prior to 2.4.5, which stems from a lack of certain encoding validations in xmltok_impl.c. No detailed vulnerability details are currently available.