ZeroDay Findings
Sign inSign up

Findings

CVE-2021-46143

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

Published Jan 6, 2022 · updated Oct 14, 2026 · libexpat project libexpat

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 6, 2022 · NIST NVD

    Detected

    In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

  2. Oct 14, 2026 · NIST NVD

    Updated

    In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

Affected

  • cpe libexpat project/libexpatversion unspecified
  • cpe netapp/active iq unified managerversion unspecified
  • cpe netapp/clustered data ontapversion unspecified
  • cpe netapp/hci baseboard management controllerh610c
  • cpe netapp/hci baseboard management controllerh610s
  • cpe netapp/hci baseboard management controllerh615c
  • cpe netapp/oncommand workflow automationversion unspecified
  • cpe netapp/solidfire & hci management nodeversion unspecified
  • cpe siemens/sinema remote connect serverversion unspecified
  • cpe tenable/nessusversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2021-46143

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2021-46143

    30-day exploitation probability 4.2%

    first.org
  • NIST NVDVulnerability recordCVE-2021-46143

    In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

    nvd.nist.gov

References