CVE-2022-23852
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
CVSS
9.8
Crítico
EPSS
5.1%
p92
KEV
—
Exploit Today
28
0-100
Publicado: 24 ene 2022 · Última mod.: 14 oct 2026 · CWE-190
4.6%EPSS · 30 días5.1%
2026-10-072026-11-04
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
- github.comhttps://github.com/libexpat/libexpat/pull/550
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
- security.gentoo.orghttps://security.gentoo.org/glsa/202209-24
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220217-0001/
- www.debian.orghttps://www.debian.org/security/2022/dsa-5073
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2022.html
- www.tenable.comhttps://www.tenable.com/security/tns-2022-05
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
- github.comhttps://github.com/libexpat/libexpat/pull/550
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
- security.gentoo.orghttps://security.gentoo.org/glsa/202209-24
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220217-0001/
- www.debian.orghttps://www.debian.org/security/2022/dsa-5073
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2022.html
- www.tenable.comhttps://www.tenable.com/security/tns-2022-05
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-398330.html
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-484086.html
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-69005——
——0Integer overflow in NPU driver parameter processing due to insufficient bounds checking.12hCVE-2026-68984——
——0In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.12hCVE-2026-181427.1 ALT—
——0IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow a remote authenticated attacker to cause a denial of service and perform limited memory corruption due to an integer overflow.18hCVE-2026-1221308.2 ALT—
——0CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16_t message length counters. Attackers can send near-65535-byte data sets and large templates to a collector forwarding over TCP to crash it and perform 2-byte writes to attacker-influenced addresses.18hCVE-2026-113768.8 ALT—
——0IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow when processing subscription requests with crafted buffer size values.18hCVE-2026-1083246.5 MED7.4%
——2Tanium addressed a denial of service vulnerability in Tanium Client.2d