CVE-2026-56406

ADVISORY - debian

Summary

libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

expat 2.8.2-1 (bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140557) https://github.com/libexpat/libexpat/pull/1255 Fixed by: https://github.com/libexpat/libexpat/commit/99d8454fdf900a6d00c2a52748e6c0eeb507574d

EPSS Score⁠: 0.00102 (0.011)

Common Weakness Enumeration (CWE)

Impacted images

Advisories

Alpine

CREATED

17 days ago

UPDATED

13 days ago

ADVISORY IDCVE-2026-56406⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

20 days ago

UPDATED

15 days ago

ADVISORY IDCVE-2026-56406⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

20 days ago

UPDATED

18 days ago

ADVISORY IDCVE-2026-56406⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

6 days ago

UPDATED

6 days ago

ADVISORY IDALAS2-2026-3795⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Amazon

CREATED

6 days ago

UPDATED

6 days ago

ADVISORY IDALAS2023-2026-1913⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Amazon

CREATED

6 days ago

UPDATED

6 days ago

ADVISORY IDALAS2023-2026-1928⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Chainguard

CREATED

17 days ago

UPDATED

17 days ago

ADVISORY ID

CGA-qrcf-92jm-xh4v

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY