CVE-2026-56131

Published: 6/19/2026 Last updated: 6/22/2026 Reserved: 6/19/2026

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Metrics

Version	Score	Severity	Vector String
3.1	4.9	Medium	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Opam packages affected (4)

conf-expat conf-gtk2 conf-gtk3 ocaml-expat

Products affected (2)

Product	Vendor	Version
libexpat	libexpat project	unspecified
libexpat	libexpat project	3.16.4gS

References (2)

https://github.com/libexpat/libexpat/pull/1267
https://github.com/libexpat/libexpat/pull/1267