CVE-2026-56131

ADVISORY - debian

Summary

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

expat 2.8.2-1 (bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140387) https://github.com/libexpat/libexpat/pull/1267

EPSS Score⁠: 0.00135 (0.033)

Common Weakness Enumeration (CWE)

Impacted images

Advisories

Alpine

CREATED

14 days ago

UPDATED

11 days ago

ADVISORY IDCVE-2026-56131⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

21 days ago

UPDATED

12 days ago

ADVISORY IDCVE-2026-56131⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

18 days ago

UPDATED

16 days ago

ADVISORY IDCVE-2026-56131⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

4 days ago

UPDATED

4 days ago

ADVISORY IDALAS2-2026-3795⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Amazon

CREATED

4 days ago

UPDATED

4 days ago

ADVISORY IDALAS2023-2026-1928⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Chainguard

CREATED

15 days ago

UPDATED

15 days ago

ADVISORY ID

CGA-9983-7642-5rjm

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY