← All advisories

Unrated severityNVD Advisory· Published Jun 21, 2026

CVE-2026-56407

CVE-2026-56407

Description

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Libexpat Project/Libexpatinferred2 versions
<2.8.2+ 1 more
- (no CPE)range: <2.8.2
- (no CPE)range: <2.8.2
osv-coords2 versions
pkg:apk/chainguard/expat-dev pkg:apk/wolfi/expat-dev
< 2.8.2-r0+ 1 more
- (no CPE)range: < 2.8.2-r0
- (no CPE)range: < 2.8.2-r0

Patches

Vulnerability mechanics

References

1

github.com/libexpat/libexpat/pull/1262mitre

News mentions

1

Libexpat: Ten Integer Overflow and Use-After-Free Vulnerabilities Disclosed Together
Vypr Intelligence · Jun 21, 2026