CVE-2024-45492

Critical

Published: 30/08/2024(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in libexpat before version 2.6.3, which can lead to an integer overflow in the nextScaffoldPart function in xmlparse.c on 32-bit platforms.

Risk Assessment

The integer overflow may lead to unexpected application behavior, creating a risk of exploitation by attackers.

Recommendation

It is recommended to update the libexpat library to version 2.6.3 or later to mitigate this vulnerability.

Original NVD description (English source)

An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).