CVE-2026-117610 | libexpat up to 2.9.0 lib/xmlparse.c externalEntityInitProcessor2 null pointer dereference

October 28, 2026 Yanac

A vulnerability was found in libexpat up to 2.9.0. It has been classified as problematic. Impacted is the function externalEntityInitProcessor2 of the file lib/xmlparse.c. This manipulation causes null pointer dereference.

This vulnerability appears as CVE-2026-117610. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More