Lucene search

K
osvGoogleOSV:CVE-2021-46143
HistoryJan 06, 2022 - 4:15 a.m.

CVE-2021-46143

2022-01-0604:15:07
Google
osv.dev
15
integer overflow
expat
xml parsing

EPSS

0.001

Percentile

51.5%

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.