CVE-2026-72522
ADVISORY - nistSummary
libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.
Common Weakness Enumeration (CWE)
ADVISORY - nist
Out-of-bounds Read
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-72522
EXPLOITABILITY SCORE
2.5
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
6.2mediumDebian
CREATED
UPDATED
ADVISORY IDCVE-2026-72522
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-