CVE-2025-66382

A flaw was found in libexpat. This vulnerability allows a denial of service (DoS) by processing a crafted file with an approximate size of 2 MiB, leading to dozens of seconds of processing time.

The highest threat of this flaw is to system availability. This issue affects systems that process untrusted XML files with libexpat, where a specially crafted file can lead to extended processing times, potentially causing a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.