CVE-2026-56410

ADVISORY - debian

Summary

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.

expat 2.8.2-1 (bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140557) https://github.com/libexpat/libexpat/pull/1252 Fixed by: https://github.com/libexpat/libexpat/commit/deeb97f7c88d17a16b0ea2521a13733abc283347 Fixed by: https://github.com/libexpat/libexpat/commit/cee20e91bf14dc7f6d2fc48f0d70d86b2dc3afea

EPSS Score⁠: 0.00129 (0.021)

Common Weakness Enumeration (CWE)

Impacted images

Advisories

Alpine

CREATED

3 months ago

UPDATED

28 days ago

ADVISORY IDCVE-2026-56410⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

3 months ago

UPDATED

9 days ago

ADVISORY IDCVE-2026-56410⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

3 months ago

UPDATED

6 days ago

ADVISORY IDCVE-2026-56410⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

16 days ago

UPDATED

15 days ago

ADVISORY IDALAS2023-2026-2157⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Chainguard

CREATED

3 months ago

UPDATED

3 months ago

ADVISORY ID

CGA-6gw2-65p5-m27x

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY