VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 3, 2012· Updated Jun 16, 2026

CVE-2012-1148

CVE-2012-1148

Description

Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • Libexpat Project/Libexpat9 versions
    cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*range: <=2.0.1
    • cpe:2.3:a:libexpat_project:libexpat:1.95.1:*:*:*:*:*:*:*
    • cpe:2.3:a:libexpat_project:libexpat:1.95.2:*:*:*:*:*:*:*
    • cpe:2.3:a:libexpat_project:libexpat:1.95.4:*:*:*:*:*:*:*
    • cpe:2.3:a:libexpat_project:libexpat:1.95.5:*:*:*:*:*:*:*
    • cpe:2.3:a:libexpat_project:libexpat:1.95.6:*:*:*:*:*:*:*
    • cpe:2.3:a:libexpat_project:libexpat:1.95.7:*:*:*:*:*:*:*
    • cpe:2.3:a:libexpat_project:libexpat:1.95.8:*:*:*:*:*:*:*
    • cpe:2.3:a:libexpat_project:libexpat:2.0.0:*:*:*:*:*:*:*
  • Apple Inc./Mac OS X
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
    Range: <=10.11.1
  • Libexpat Project/Expat XML Parserllm-create
    Range: <2.1.0
  • osv-coords
    pkg:rpm/opensuse/expat&distro=openSUSE%20Tumbleweed
    Range: < 2.2.0-3.1

Patches

Vulnerability mechanics

References

18

News mentions

0

No linked articles in our index yet.