Related Vulnerabilities: CVE-2022-25315  

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

Description

The MITRE CVE dictionary describes this issue as:

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

Additional Information

  • Bugzilla 2056363: CVE-2022-25315 expat: Integer overflow in storeRawNames
  • FAQ: Frequently asked questions about CVE-2022-25315