← All advisories

Unrated severityNVD Advisory· Published Jun 21, 2026

CVE-2026-56405

CVE-2026-56405

Description

libexpat before 2.8.2 has an integer overflow in getAttributeId.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

osv-coords6 versions
pkg:apk/chainguard/libexpat1 pkg:apk/chainguard/expat pkg:apk/chainguard/expat-dev pkg:apk/wolfi/expat pkg:apk/wolfi/expat-dev pkg:apk/wolfi/libexpat1
< 2.8.2-r0+ 5 more
- (no CPE)range: < 2.8.2-r0
- (no CPE)range: < 2.8.2-r0
- (no CPE)range: < 2.8.2-r0
- (no CPE)range: < 2.8.2-r0
- (no CPE)range: < 2.8.2-r0
- (no CPE)range: < 2.8.2-r0
Libexpat Project/Libexpatllm-fuzzy
Range: <2.8.2

Patches

Vulnerability mechanics

References

1

github.com/libexpat/libexpat/pull/1251mitre

News mentions

1

Libexpat: Ten Integer Overflow and Use-After-Free Vulnerabilities Disclosed Together
Vypr Intelligence · Jun 21, 2026