https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T19:11:41.595652+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-43680 CVE-2022-43680 2026-10-04T19:11:41.599826+00:00

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

 https://vulnerability.circl.lu/vuln/icsa-23-143-01 ICSA-23-143-01 — Hitachi Energy’s AFS65x, AFS67x, AFR67x and AFF66x Products 2026-10-04T19:11:41.600009+00:00

The libexpat library is incorporated in the AFS, AFR and AFF products family. Versions of libexpat before 2.4.9 have a use-after-free in the do-Content function in xmlparse.c. Successful exploitation of this vulnerability could lead to disclosure of sensitive information, addition or modification of data, or a denial-of-service condition. The libexpat library is incorporated in the AFS, AFR and AFF products family. In versions of libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations. Successful exploitation of this vulnerability could lead to a denial-of-service condition.