CVE-2026-56132 | libexpat up to 2.8.1 xmlparse.c doProlog incorrect synchronization

June 19, 2026 Yanac

A vulnerability has been found in libexpat up to 2.8.1 and classified as problematic. Affected is the function doProlog of the file xmlparse.c. The manipulation leads to incorrect synchronization.

This vulnerability is referenced as CVE-2026-56132. The attack can only be performed from a local environment. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More