https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T18:46:33.976878+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-124317 fkie_cve-2026-124317 2026-11-10T18:46:33.980411+00:00

libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknown_toUtf8() and unknown_toUtf16() in xmltok.c when handling application-registered unknown encodings. Attackers can supply a document ending in a truncated multibyte sequence so the convert callback reads past the parse buffer, leaking adjacent memory or crashing applications.

 https://db.gcve.eu/vuln/ghsa-wm22-jw4m-rfcf GHSA-wm22-jw4m-rfcf 2026-11-10T18:46:33.980506+00:00

libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknown_toUtf8() and unknown_toUtf16() in xmltok.c when handling application-registered unknown encodings. Attackers can supply a document ending in a truncated multibyte sequence so the convert callback reads past the parse buffer, leaking adjacent memory or crashing applications.

 https://db.gcve.eu/vuln/msrc_cve-2026-124317 msrc_CVE-2026-124317 — libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16 2026-11-10T18:46:33.980540+00:00 msrc_CVE-2026-124317 https://db.gcve.eu/vuln/ubuntu-cve-2026-124317 UBUNTU-CVE-2026-124317 2026-11-10T18:46:33.980571+00:00

Affected: Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: expat, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: expat, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3 and 64 more

libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknown_toUtf8() and unknown_toUtf16() in xmltok.c when handling application-registered unknown encodings. Attackers can supply a document ending in a truncated multibyte sequence so the convert callback reads past the parse buffer, leaking adjacent memory or crashing applications.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4387 WID-SEC-W-2026-4387 — expat: Schwachstelle ermöglicht Denial of Service 2026-11-10T18:46:33.980713+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in expat ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.