CVE-2022-22826

Related Vulnerabilities: CVE-2022-22826  

nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

Description

The MITRE CVE dictionary describes this issue as:

nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

Additional Information

  • Bugzilla 2044484: CVE-2022-22826 expat: Integer overflow in nextScaffoldPart in xmlparse.c
  • CWE-190: Integer Overflow or Wraparound
  • FAQ: Frequently asked questions about CVE-2022-22826