Unrated severityNVD Advisory· Published Oct 27, 2024· Updated Apr 30, 2025

CVE-2024-50602

Description

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

Affected products

101

libexpat/libexpatdescription
osv-coords100 versions
pkg:apk/chainguard/python-3.10 pkg:apk/chainguard/python-3.10-base pkg:apk/chainguard/python-3.10-base-dev pkg:apk/chainguard/python-3.10-dev pkg:apk/chainguard/python-3.10-doc pkg:apk/chainguard/python-3.11 pkg:apk/chainguard/python-3.11-base pkg:apk/chainguard/python-3.11-base-dev pkg:apk/chainguard/python-3.11-dev pkg:apk/chainguard/python-3.11-doc pkg:apk/chainguard/python-3.12 pkg:apk/chainguard/python-3.12-base pkg:apk/chainguard/python-3.12-base-dev pkg:apk/chainguard/python-3.12-dev pkg:apk/chainguard/python-3.12-doc pkg:apk/chainguard/python-3.12-privileged-netbindservice pkg:apk/chainguard/python-3.12-tk pkg:apk/chainguard/python-3.13 pkg:apk/chainguard/python-3.13-base pkg:apk/chainguard/python-3.13-base-dev pkg:apk/chainguard/python-3.13-dev pkg:apk/chainguard/python-3.13-doc pkg:apk/chainguard/python-3.13-privileged-netbindservice pkg:apk/chainguard/python-3.13-tk pkg:apk/chainguard/python-3.9 pkg:apk/chainguard/python-3.9-base pkg:apk/chainguard/python-3.9-base-dev pkg:apk/chainguard/python-3.9-default pkg:apk/chainguard/python-3.9-dev pkg:apk/chainguard/python-3.9-doc pkg:apk/wolfi/python-3.10 pkg:apk/wolfi/python-3.10-base pkg:apk/wolfi/python-3.10-base-dev pkg:apk/wolfi/python-3.10-dev pkg:apk/wolfi/python-3.10-doc pkg:apk/wolfi/python-3.11 pkg:apk/wolfi/python-3.11-base pkg:apk/wolfi/python-3.11-base-dev pkg:apk/wolfi/python-3.11-dev pkg:apk/wolfi/python-3.11-doc pkg:apk/wolfi/python-3.12 pkg:apk/wolfi/python-3.12-base pkg:apk/wolfi/python-3.12-base-dev pkg:apk/wolfi/python-3.12-dev pkg:apk/wolfi/python-3.12-doc pkg:apk/wolfi/python-3.12-privileged-netbindservice pkg:apk/wolfi/python-3.12-tk pkg:apk/wolfi/python-3.13 pkg:apk/wolfi/python-3.13-base pkg:apk/wolfi/python-3.13-base-dev pkg:apk/wolfi/python-3.13-dev pkg:apk/wolfi/python-3.13-doc pkg:apk/wolfi/python-3.13-privileged-netbindservice pkg:apk/wolfi/python-3.13-tk pkg:bitnami/libpython pkg:bitnami/python pkg:bitnami/python-min pkg:rpm/almalinux/expat pkg:rpm/almalinux/expat-devel pkg:rpm/opensuse/audacity&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/expat&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/expat&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/expat&distro=openSUSE%20Leap%20Micro%205.5 pkg:rpm/opensuse/expat&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/gama&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/mozjs115&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/mozjs115&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/mozjs128&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/mozjs52&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/mozjs60&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/mozjs78&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/mozjs78&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/mozjs78&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/paraview&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/python311-wxPython&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/python3-wxPython&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/python3-wxPython&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/xsd&distro=openSUSE%20Tumbleweed pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Micro%206.0 pkg:rpm/suse/expat&distro=SUSE%20Linux%20Micro%206.1 pkg:rpm/suse/mozjs115&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6 pkg:rpm/suse/mozjs52&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7 pkg:rpm/suse/mozjs60&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/mozjs60&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/mozjs60&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/mozjs60&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/mozjs60&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7 pkg:rpm/suse/mozjs78&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5 pkg:rpm/suse/mozjs78&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5 pkg:rpm/suse/mozjs78&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6 pkg:rpm/suse/python3-wxPython&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5 pkg:rpm/suse/python3-wxPython&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6
< 3.10.16-r0+ 99 more
- (no CPE)range: < 3.10.16-r0
- (no CPE)range: < 3.10.16-r0
- (no CPE)range: < 3.10.16-r0
- (no CPE)range: < 3.10.16-r0
- (no CPE)range: < 3.10.16-r0
- (no CPE)range: < 3.11.11-r0
- (no CPE)range: < 3.11.11-r0
- (no CPE)range: < 3.11.11-r0
- (no CPE)range: < 3.11.11-r0
- (no CPE)range: < 3.11.11-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.9.21-r0
- (no CPE)range: < 3.9.21-r0
- (no CPE)range: < 3.9.21-r0
- (no CPE)range: < 3.9.21-r0
- (no CPE)range: < 3.9.21-r0
- (no CPE)range: < 3.9.21-r0
- (no CPE)range: < 3.10.16-r0
- (no CPE)range: < 3.10.16-r0
- (no CPE)range: < 3.10.16-r0
- (no CPE)range: < 3.10.16-r0
- (no CPE)range: < 3.10.16-r0
- (no CPE)range: < 3.11.11-r0
- (no CPE)range: < 3.11.11-r0
- (no CPE)range: < 3.11.11-r0
- (no CPE)range: < 3.11.11-r0
- (no CPE)range: < 3.11.11-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.12.8-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.13.1-r0
- (no CPE)range: < 3.9.21
- (no CPE)range: < 3.9.21
- (no CPE)range: < 3.9.21
- (no CPE)range: < 2.2.5-16.el8_10
- (no CPE)range: < 2.2.5-16.el8_10
- (no CPE)range: < 3.7.0-1.1
- (no CPE)range: < 2.4.4-150400.3.25.1
- (no CPE)range: < 2.4.4-150400.3.25.1
- (no CPE)range: < 2.4.4-150400.3.25.1
- (no CPE)range: < 2.6.4-1.1
- (no CPE)range: < 2.31-1.1
- (no CPE)range: < 115.4.0-150600.3.6.1
- (no CPE)range: < 115.15.0-3.1
- (no CPE)range: < 128.5.1-2.1
- (no CPE)range: < 52.6.0-150000.3.9.1
- (no CPE)range: < 60.9.0-150200.6.8.1
- (no CPE)range: < 78.15.0-150400.3.11.1
- (no CPE)range: < 78.15.0-150400.3.11.1
- (no CPE)range: < 78.15.0-7.1
- (no CPE)range: < 5.12.1-2.1
- (no CPE)range: < 4.1.1-150400.3.8.1
- (no CPE)range: < 4.1.1-150400.10.1
- (no CPE)range: < 4.1.1-150400.10.1
- (no CPE)range: < 4.1.0-3.1
- (no CPE)range: < 2.2.5-150000.3.33.1
- (no CPE)range: < 2.2.5-150000.3.33.1
- (no CPE)range: < 2.4.4-150400.3.25.1
- (no CPE)range: < 2.4.4-150400.3.25.1
- (no CPE)range: < 2.4.4-150400.3.25.1
- (no CPE)range: < 2.4.4-150400.3.25.1
- (no CPE)range: < 2.4.4-150400.3.25.1
- (no CPE)range: < 2.1.0-21.40.1
- (no CPE)range: < 2.5.0-4.1
- (no CPE)range: < 2.5.0-slfo.1.1_2.1
- (no CPE)range: < 115.4.0-150600.3.6.1
- (no CPE)range: < 52.6.0-150000.3.9.1
- (no CPE)range: < 60.9.0-150200.6.8.1
- (no CPE)range: < 60.9.0-150200.6.8.1
- (no CPE)range: < 60.9.0-150200.6.8.1
- (no CPE)range: < 60.9.0-150200.6.8.1
- (no CPE)range: < 60.9.0-150200.6.8.1
- (no CPE)range: < 78.15.0-150400.3.11.1
- (no CPE)range: < 78.15.0-150400.3.11.1
- (no CPE)range: < 78.15.0-150400.3.11.1
- (no CPE)range: < 4.1.1-150400.10.1
- (no CPE)range: < 4.1.1-150400.10.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/libexpat/libexpat/pull/915mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000