CVE-2026-24515

ADVISORY - nist

Summary

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.

EPSS Score⁠: 0.0017 (0.067)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-476⁠

NULL Pointer Dereference

Impacted images

Advisories

NIST

CREATED

6 months ago

UPDATED

2 months ago

ADVISORY IDCVE-2026-24515⁠

EXPLOITABILITY SCORE

1.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-476⁠

CVSS SCORE

2.9low

Alpine

CREATED

6 months ago

UPDATED

1 month ago

ADVISORY IDCVE-2026-24515⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

6 months ago

UPDATED

59 minutes ago

ADVISORY IDCVE-2026-24515⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

6 months ago

UPDATED

5 months ago

ADVISORY IDCVE-2026-24515⁠

EXPLOITABILITY SCORE

1.0

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

2.5medium

Chainguard

CREATED

29 days ago

UPDATED

29 days ago

ADVISORY ID

CGA-wfpf-qh8p-38hr

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Photon

CREATED

3 months ago

UPDATED

3 months ago

ADVISORY ID

CVE-2026-24515

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

2.5low