CVE-2026-77214 | Libexpat up to 2.8.5 Parsing xmlparse.c XML_ParseBuffer len out-of-bounds

October 7, 2026 Yanac

A vulnerability, which was classified as critical, was found in Libexpat up to 2.8.5. Affected is the function XML_ParseBuffer of the file xmlparse.c of the component Parsing. Executing a manipulation of the argument len can lead to out-of-bounds read.

This vulnerability appears as CVE-2026-77214. The attack may be performed from remote. There is no available exploit.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More