CVE-2026-56403 - Vulnerability Details - OpenCVE

libexpat before 2.8.2 has an integer overflow in storeAtts.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Libexpat Project	Libexpat

No data.

No data.

References

Link	Providers
https://github.com/libexpat/libexpat/pull/1232
https://nvd.nist.gov/vuln/detail/CVE-2026-56403
https://www.cve.org/CVERecord?id=CVE-2026-56403

History

Tue, 23 Jun 2026 12:15:00 +0000

Type	Values Removed	Values Added
Title	Integer Overflow in libexpat XML Parsing Library	libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts
References		https://nvd.nist.gov/vuln/detail/CVE-2026-56403 https://www.cve.org/CVERecord?id=CVE-2026-56403
Metrics	threat_severity `None`	threat_severity `Moderate`

Mon, 22 Jun 2026 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sun, 21 Jun 2026 18:15:00 +0000

Type	Values Removed	Values Added
Title		Integer Overflow in libexpat XML Parsing Library

Sun, 21 Jun 2026 16:00:00 +0000

Type	Values Removed	Values Added
Description		libexpat before 2.8.2 has an integer overflow in storeAtts.
First Time appeared		Libexpat Project Libexpat Project libexpat
Weaknesses		CWE-190
CPEs		cpe:2.3:a:libexpat_project:libexpat::::::::
Vendors & Products		Libexpat Project Libexpat Project libexpat
References		https://github.com/libexpat/libexpat/pull/1232
Metrics		cvssV3_1 `{'score': 6.9, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-06-21T15:43:55.849Z

Updated: 2026-06-22T17:05:39.258Z

Reserved: 2026-06-21T15:43:55.436Z

Link: CVE-2026-56403

Vulnrichment

Updated: 2026-06-22T17:05:36.134Z

NVD

No data.

Redhat

Severity : Moderate

Publid Date: 2026-06-21T15:43:55Z

Links: CVE-2026-56403 - Bugzilla

{"bugzilla": {"description": "libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts", "id": "2491186", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491186"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.9", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "status": "draft"}, "cwe": "CWE-190", "details": ["libexpat before 2.8.2 has an integer overflow in storeAtts.", "A flaw was found in libexpat. An integer overflow vulnerability exists in the `storeAtts` function. This flaw could allow an attacker to corrupt memory, leading to a denial of service, information disclosure, or potentially arbitrary code execution, compromising the integrity and confidentiality of data."], "name": "CVE-2026-56403", "package_state": [{"cpe": "cpe:/a:redhat:exploit_intelligence:0", "fix_state": "Under investigation", "package_name": "exploit-intelligence-tech-preview/vulnerability-analysis-rhel9", "product_name": "Exploit Intelligence"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Fix deferred", "package_name": "ansible-automation-platform-26/lightspeed-chatbot-rhel9", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Fix deferred", "package_name": "ansible-automation-platform-27/lightspeed-chatbot-rhel9", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Under investigation", "package_name": "expat", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Under investigation", "package_name": "compat-expat1", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Under investigation", "package_name": "expat", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Under investigation", "package_name": "expat", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Under investigation", "package_name": "expat", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Under investigation", "package_name": "mingw-expat", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Under investigation", "package_name": "expat", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:jboss_core_services:1", "fix_state": "Under investigation", "package_name": "libexpat-2.dll", "product_name": "Red Hat JBoss Core Services"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-llama-stack-core-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-mlflow-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}], "public_date": "2026-06-21T15:43:55Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-56403\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-56403\nhttps://github.com/libexpat/libexpat/pull/1232"], "threat_severity": "Moderate"}