← All advisories

Low severity2.9NVD Advisory· Published Nov 28, 2025· Updated Jun 2, 2026

CVE-2025-66382

CVE-2025-66382

Description

In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Libexpat Project/Libexpat3 versions
cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*range: <=2.7.3
- (no CPE)range: <=2.7.3
- (no CPE)range: 0
osv-coords
pkg:rpm/opensuse/tdom&distro=openSUSE%20Tumbleweed
Range: < 0.9.6-1.1

Patches

Vulnerability mechanics

References

4

www.openwall.com/lists/oss-security/2025/12/02/1nvdMailing List
github.com/libexpat/libexpat/issues/1076nvdIssue Tracking
cert-portal.siemens.com/productcert/html/ssa-082556.htmlnvd
cert-portal.siemens.com/productcert/html/ssa-253495.htmlnvd

News mentions

0

No linked articles in our index yet.