CVE-2022-23990

Related Vulnerabilities: CVE-2022-23990  

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

Description

The MITRE CVE dictionary describes this issue as:

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

Additional Information

  • Bugzilla 2048356: CVE-2022-23990 : expat: integer overflow in the doProlog function
  • CWE-190: Integer Overflow or Wraparound
  • FAQ: Frequently asked questions about CVE-2022-23990