CVE-2026-56411

MEDIUM

xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.

StatusAnalyzed

설명

xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.

Score Summary

CVSS Score: 6.9
Version: 3.1
VPI: 69
Why this VPI (explainable, experimental)
VPI breakdown
Impact 69.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 69.00
VPI formula vpi-v1
EPSS: 0.1%
(상위 1.50%)
Attack Vector: Local Access
High Complexity
No Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
Low Availability Impact

Details

CWE Weakness Classification

References (1)

Affected Products (1)

Impact	69.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	69.00