CVE Catalog
CVE-2026-45186
LowCVSS 2.9Exploitation Probability (EPSS)
Low risk0.44%
36th percentile - higher than 36% of all known CVEs
Summary
In libexpat before version 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.
Risk Assessment
The risk involves potential DoS attacks by an attacker that can cause server or application overload when processing XML.
Recommendation
Update libexpat to version 2.8.1 or later and limit the size of processed XML.
Original NVD description (English source)
In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.