libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknown_toUtf8() and unknown_toUtf16() in xmltok.c when handling application-registered unknown encodings. Attackers can supply a document ending in a truncated multibyte sequence so the convert callback reads past the parse buffer, leaking adjacent memory or crashing applications.
| CVE | CVE-2026-124317 |
|---|---|
| Severidad | MEDIUM |
| CVSS | 4.8 / 10 |
| EPSS | 0.3% en 30 días (percentil 16) |
| CWE | CWE-126 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Producto afectado
libexpat 2.10.0
Producto derivado de la descripción (el CPE estructurado de NVD aún no está publicado).