Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| libexpat project | libexpat | unaffected |
|
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
| Link | Providers |
|---|---|
| https://github.com/libexpat/libexpat/pull/1246 |
|
Thu, 04 Jun 2026 06:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Use‑After‑Free in libexpat XML Parser Due to Missing Call Depth Tracking |
Thu, 04 Jun 2026 05:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur, | |
| First Time appeared |
Libexpat Project
Libexpat Project libexpat |
|
| Weaknesses | CWE-416 | |
| CPEs | cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Libexpat Project
Libexpat Project libexpat |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-06-04T04:23:59.788Z
Reserved: 2026-06-04T04:20:31.953Z
Link: CVE-2026-50219
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-06-04T06:16:25.050
Modified: 2026-06-04T06:16:25.050
Link: CVE-2026-50219
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-06-04T06:30:07Z