CVE-2026-124317 | Libexpat up to 2.10.0 xmltok.c unknown_toUtf8/unknown_toUtf16 out-of-bounds

A vulnerability described as critical has been identified in Libexpat up to 2.10.0. Affected is the function unknown_toUtf8/unknown_toUtf16 of the file xmltok.c. Executing a manipulation can lead to out-of-bounds read.

This vulnerability is registered as CVE-2026-124317. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More