CVE-2026-56405
libexpat before 2.8.2 has an integer overflow in getAttributeId.
CVSS
6.9
Medio
EPSS
0.1%
p2
KEV
—
Exploit Today
1
0-100
Publicado: 21 jun 2026 · Última mod.: 25 oct 2026 · CWE-190
0.1%EPSS · 30 días0.1%
2026-10-072026-11-03
libexpat before 2.8.2 has an integer overflow in getAttributeId.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-69005——
———Integer overflow in NPU driver parameter processing due to insufficient bounds checking.4hCVE-2026-68984——
———In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.4hCVE-2026-181427.1 ALT—
———IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow a remote authenticated attacker to cause a denial of service and perform limited memory corruption due to an integer overflow.10hCVE-2026-1221308.2 ALT—
———CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16_t message length counters. Attackers can send near-65535-byte data sets and large templates to a collector forwarding over TCP to crash it and perform 2-byte writes to attacker-influenced addresses.10hCVE-2026-113768.8 ALT—
———IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow when processing subscription requests with crafted buffer size values.10hCVE-2026-1083246.5 MED—
——0Tanium addressed a denial of service vulnerability in Tanium Client.1d