CVE-2026-56405

A flaw was found in libexpat. An integer overflow vulnerability exists within the getAttributeId function. This flaw could allow an attacker to potentially disclose sensitive information or execute arbitrary code, leading to a compromise of the system's integrity and confidentiality.

The moderate vulnerability in libexpat's getAttributeId function could allow a local attacker to achieve information disclosure or arbitrary code execution due to an integer overflow. The high attack complexity and local access required inherently mitigate the opportunity for successful exploitation. However, successful exploitation could compromise system integrity and confidentiality in Red Hat products that process untrusted XML input using libexpat.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, Red Hat recommends avoiding the processing of untrusted or unvalidated XML input with applications utilizing libexpat. Implementing strict input validation and sanitization for all XML data originating from untrusted sources can reduce the risk of exploitation. This operational control helps prevent the vulnerable getAttributeId function from processing malicious input.