Critical severity9.8NVD Advisory· Published May 26, 2016· Updated Jun 17, 2026

CVE-2016-0718

Description

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Libexpat Project/Libexpat
cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*
Range: <2.2.0
McAfee/Policy Auditor
cpe:2.3:a:mcafee:policy_auditor:*:*:*:*:*:*:*:*
Range: <6.5.1
Mozilla Corporation/Firefox
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Range: <48.0
Python (programming language)/Python
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Range: >=2.7.0,<2.7.15
SUSE S.A./Linux Enterprise Debuginfo
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
SUSE S.A./Studio Onsite
cpe:2.3:a:suse:studio_onsite:1.3:*:*:*:*:*:*:*
Apple Inc./Mac OS X
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Range: >=10.11.0,<=10.11.5
Canonical/Ubuntu Linux3 versions
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
OpenSUSE/Leap
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
OpenSUSE/openSUSE2 versions
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
- cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
SUSE S.A./Linux Enterprise Desktop2 versions
cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*
SUSE S.A./Linux Enterprise Server3 versions
cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*
SUSE S.A./Linux Enterprise Software Development Kit3 versions
cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*
Libexpat Project/Expatllm-create
osv-coords57 versions
pkg:rpm/opensuse/expat&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/expat&distro=SUSE%20Studio%20Onsite%201.3 pkg:rpm/suse/python3-base&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/python3-base&distro=SUSE%20Enterprise%20Storage%205 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4 pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/python3-base&distro=SUSE%20OpenStack%20Cloud%207 pkg:rpm/suse/python3-base&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/python3-base&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/python3&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/python3&distro=SUSE%20Enterprise%20Storage%205 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4 pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/python3&distro=SUSE%20OpenStack%20Cloud%207 pkg:rpm/suse/python3&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/python3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208
< 2.2.0-3.1+ 56 more
- (no CPE)range: < 2.2.0-3.1
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 50.1.0-1.1
- (no CPE)range: < 2.1.0-17.1
- (no CPE)range: < 2.1.0-17.1
- (no CPE)range: < 2.0.1-88.38.1
- (no CPE)range: < 2.1.0-17.1
- (no CPE)range: < 2.1.0-17.1
- (no CPE)range: < 2.0.1-88.38.1
- (no CPE)range: < 2.1.0-17.1
- (no CPE)range: < 2.1.0-17.1
- (no CPE)range: < 2.0.1-88.38.1
- (no CPE)range: < 2.1.0-17.1
- (no CPE)range: < 2.1.0-17.1
- (no CPE)range: < 2.0.1-88.38.1
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.2
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3
- (no CPE)range: < 3.4.10-25.39.3

Patches

Vulnerability mechanics

References

www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlnvdPatchThird Party Advisory
lists.apple.com/archives/security-announce/2016/Jul/msg00000.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.htmlnvdThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.htmlnvdThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.htmlnvdThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.htmlnvdThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.htmlnvdThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.htmlnvdThird Party Advisory
packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.htmlnvdThird Party AdvisoryVDB Entry
rhn.redhat.com/errata/RHSA-2016-2824.htmlnvdThird Party Advisory
seclists.org/fulldisclosure/2017/Feb/68nvdMailing ListThird Party Advisory
support.eset.com/ca6333/nvdThird Party Advisory
www.debian.org/security/2016/dsa-3582nvdThird Party Advisory
www.mozilla.org/security/announce/2016/mfsa2016-68.htmlnvdThird Party Advisory
www.openwall.com/lists/oss-security/2016/05/17/12nvdMailing ListThird Party Advisory
www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlnvdThird Party Advisory
www.securityfocus.com/bid/90729nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1036348nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1036415nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1037705nvdThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-2983-1nvdThird Party Advisory
www.ubuntu.com/usn/USN-3044-1nvdThird Party Advisory
access.redhat.com/errata/RHSA-2018:2486nvdThird Party Advisory
bugzilla.mozilla.org/show_bug.cginvdIssue TrackingThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
kc.mcafee.com/corporate/indexnvdThird Party Advisory
security.gentoo.org/glsa/201701-21nvdThird Party Advisory
source.android.com/security/bulletin/2016-11-01.htmlnvdThird Party Advisory
support.apple.com/HT206903nvdThird Party Advisory
www.tenable.com/security/tns-2016-20nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.011
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000