Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-75815.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-75815
Upstream
Published
2026-01-30T07:16:15Z
Modified
2026-04-01T05:22:54.269838Z
Summary
CVE-2026-25210 affecting package expat for versions less than 2.6.4-4
Details

In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.

References

Affected packages

Azure Linux:3 / expat

Package

Name
expat
Purl
pkg:rpm/azure-linux/expat

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.4-4

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-75815.json"