CVE-2026-56404

A flaw was found in libexpat. This vulnerability, an integer overflow in the addBinding function, could allow a local attacker to execute arbitrary code. By exploiting this, an attacker could gain control over the affected system, compromising its confidentiality and integrity.

This Moderate impact flaw in libexpat, an XML parsing library, could lead to arbitrary code execution through an integer overflow in the addBinding function. Exploitation requires local access and high attack complexity, which limits its immediate risk in standard Red Hat deployments. The vulnerability primarily affects applications that process untrusted XML data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Do not process untrusted or unvalidated XML with libexpat-based applications. Enforce strict maximum size limits on XML input and namespace URI lengths before parsing