CVE Catalog

CVE-2024-50602

Medium
Published: Translated: NVD NIST

Summary

Issue in libexpat before version 2.6.4. The XML_ResumeParser function can crash if XML_StopParser stops/suspends an unstarted parser.

Risk Assessment

Applications using libexpat may crash when processing specially crafted XML data, potentially leading to denial of service.

Recommendation

Update libexpat to version 2.6.4 or later.

Original NVD description (English source)

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS