← Back to browse · API

CVE-2022-22824

Severity
CRITICAL
CVSS
9.8
EPSS
0.03404
Risk score
40.39
CISA KEV
No
PoC
No
Published
2022-01-08
Modified
2025-05-05
First seen
2026-08-07
Aliases
EUVD-2022-27962, GHSA-5PJ8-9WMW-J96M
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-27962

Description

defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

References