https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T21:41:58.461805+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-43680 CVE-2022-43680 2026-10-03T21:41:58.517698+00:00

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

 https://vulnerability.circl.lu/vuln/usn-5638-2 USN-5638-2 — expat vulnerabilities 2026-10-03T21:41:58.517949+00:00

Affected: Ubuntu:18.04:LTS: expat, Ubuntu:20.04:LTS: expat, Ubuntu:22.04:LTS: expat

USN-5638-1 fixed a vulnerability in Expat. This update provides the corresponding updates for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.

It was discovered that Expat incorrectly handled memory in out-of-memory situations. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2022-43680)

Original advisory details:

Rhodri James discovered that Expat incorrectly handled memory when processing certain malformed XML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.