Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3893-1 | expat security update |
Debian DSA |
DSA-5770-1 | expat security update |
Ubuntu USN |
USN-7000-1 | Expat vulnerabilities |
Ubuntu USN |
USN-7000-2 | Expat vulnerabilities |
Tue, 12 May 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Tue, 04 Nov 2025 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Wed, 16 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Tue, 17 Dec 2024 02:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:service_interconnect:1::el9 |
Fri, 22 Nov 2024 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:openshift:4.17::el9 |
Fri, 22 Nov 2024 12:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Wed, 09 Oct 2024 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat openshift
|
|
| CPEs | cpe:/a:redhat:openshift:4.16::el9 | |
| Vendors & Products |
Redhat openshift
|
Thu, 26 Sep 2024 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat service Interconnect
|
|
| CPEs | cpe:/a:redhat:service_interconnect:1.4::el9 | |
| Vendors & Products |
Redhat service Interconnect
|
Tue, 24 Sep 2024 11:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/o:redhat:enterprise_linux:8 |
Wed, 18 Sep 2024 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat
Redhat enterprise Linux |
|
| CPEs | cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9 |
|
| Vendors & Products |
Redhat
Redhat enterprise Linux |
Fri, 06 Sep 2024 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Thu, 05 Sep 2024 09:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | libexpat: integer overflow | |
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
Wed, 04 Sep 2024 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Libexpat Project
Libexpat Project libexpat |
|
| CPEs | cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Libexpat Project
Libexpat Project libexpat |
Fri, 30 Aug 2024 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Libexpat
Libexpat expat |
|
| Weaknesses | CWE-190 | |
| CPEs | cpe:2.3:a:libexpat:expat:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Libexpat
Libexpat expat |
|
| Metrics |
cvssV3_1
|
Fri, 30 Aug 2024 02:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-05-12T11:57:34.270Z
Reserved: 2024-08-30T00:00:00.000Z
Link: CVE-2024-45492
Updated: 2025-11-04T16:15:49.298Z
Status : Modified
Published: 2024-08-30T03:15:03.930
Modified: 2026-05-12T12:17:10.923
Link: CVE-2024-45492
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
Ubuntu USN