CVE-2025-59375

01/תיאור (מקור, אנגלית)

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

02/מוצרים מושפעים

libexpat_project: libexpat

03/קישורים9

• github.com/libexpat/libexpat/issues/1018 ExploitIssue Tracking
• issues.oss-fuzz.com/issues/439133977 ExploitIssue Tracking
• github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da973‮… Product
• github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes Product
• github.com/libexpat/libexpat/pull/1034 Issue Tracking
• www.openwall.com/lists/oss-security/2025/09/16/2
• www.openwall.com/lists/oss-security/2026/05/01/5
• cert-portal.siemens.com/productcert/html/ssa-082556.html
• cert-portal.siemens.com/productcert/html/ssa-089022.html