VDB

GCVE-VVD-MAGEIA-2022-409

GCVE-VVD-MAGEIA-2022-409
Advisory Published
Vulnetix · Advisory published November 4, 2022
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations. (CVE-2022-43680)

Affected Products

VendorProductVersionsPlatforms
Mageiaexpat0 (affected), 2.2.10-1.6.mga8 (unaffected)

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›