CVE-2022-43680
ADVISORY - nistSummary
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.
EPSS Score: 0.00244 (0.477)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Use After Free
ADVISORY - redhat
Use After Free
Sign in to Docker Scout
See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.
Sign in