CVE-2022-25314
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
CVSS
7.5
High
EPSS
4.8%
p92
KEV
—
Exploit Today
28
0-100
Published: Feb 18, 2022 · Last modified: Oct 14, 2026 · CWE-190
4.8%EPSS · 30 days4.8%
2026-10-172026-11-13
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2022/02/19/1
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
- github.comhttps://github.com/libexpat/libexpat/pull/560
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
- security.gentoo.orghttps://security.gentoo.org/glsa/202209-24
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220303-0008/
- www.debian.orghttps://www.debian.org/security/2022/dsa-5085
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2022.html
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2022/02/19/1
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
- github.comhttps://github.com/libexpat/libexpat/pull/560
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
- security.gentoo.orghttps://security.gentoo.org/glsa/202209-24
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220303-0008/
- www.debian.orghttps://www.debian.org/security/2022/dsa-5085
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2022.html
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-398330.html
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1291353.7 LOW—
——0picoquic before 2026.11.05.3e2e3d3 contains an integer overflow vulnerability in picoquic_decode_time_stamp_frame() that allows remote QUIC peers to corrupt stored timestamps by sending oversized TIME_STAMP values. Attackers on connections negotiating the TIME_STAMP extension can send large values shifted by ack_delay_exponent to wrap the result, corrupting RTT and bandwidth estimation and degrading congestion control.1dCVE-2026-109094——
——0A integer overflow that can lead to a buffer overrread in the XRes QueryResourceBytes Swap Path in the X.Org xwayland before 24.1.15 and X Server before 21.1.26 on 32bit systems could be used by authenticated clients to crash the X server.2dCVE-2026-1075248.8 HIG—
——0Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this vulnerability, potentially leading to out-of-bounds data access or denial of service.2dCVE-2026-1075238.7 HIG—
——0Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service.2dCVE-2026-109095——
——0A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash the X server or leak out data.2dCVE-2026-103645—6.7%
——2An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected.2d