CVE-2026-56403

ADVISORY - debian

Summary

libexpat before 2.8.2 has an integer overflow in storeAtts.

expat 2.8.2-1 (bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140557) https://github.com/libexpat/libexpat/pull/1232 Fixed by: https://github.com/libexpat/libexpat/commit/12dc6d8d3d65f79471a94d8565f6bf1cf245f648 Fixed by: https://github.com/libexpat/libexpat/commit/147c8f36d6277d5c6011c098370a8362aed47b15

EPSS Score⁠: 0.00102 (0.012)

Common Weakness Enumeration (CWE)

Impacted images

Advisories

Alpine

CREATED

4 days ago

UPDATED

1 day ago

ADVISORY IDCVE-2026-56403⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

8 days ago

UPDATED

3 days ago

ADVISORY IDCVE-2026-56403⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

8 days ago

UPDATED

6 days ago

ADVISORY IDCVE-2026-56403⁠

EXPLOITABILITY SCORE

1.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

6.9medium

Chainguard

CREATED

5 days ago

UPDATED

5 days ago

ADVISORY ID

CGA-73rh-q5gp-5hcc

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY