CVE-2026-56408

MEDIUM

libexpat before 2.8.2 has an integer overflow in copyString.

StatusAnalyzed

설명

libexpat before 2.8.2 has an integer overflow in copyString.

Score Summary

CVSS Score: 6.9
Version: 3.1
VPI: 69
Why this VPI (explainable, experimental)
VPI breakdown
Impact 69.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 69.00
VPI formula vpi-v1
EPSS: 0.1%
(상위 1.15%)
Attack Vector: Local Access
High Complexity
No Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
Low Availability Impact

Details

CWE Weakness Classification

References (1)

Affected Products (1)

Impact	69.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	69.00