CVE-2022-25314

An integer overflow flaw was found in expat. This issue affects the encoding name parameter at the parser creation time, which is often hard-coded (rather than user input), takes a value in the gigabytes to trigger, and on a 64-bit machine. This flaw can cause a denial of service.

Mitigation

There is no known mitigation other than restricting applications using the expat library from processing untrusted XML content.