medium6.9
CVE-2026-56411
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.
Impact
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libexpat Project | Libexpat | before 2.8.2 |