In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 24, 2022 · NIST NVD

   Detected

   In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

2. Oct 14, 2026 · NIST NVD

   Updated

   In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

Affected

• cpe debian/debian linux10.0
• cpe debian/debian linux11.0
• cpe fedoraproject/fedora35
• cpe fedoraproject/fedora36
• cpe fedoraproject/fedora37
• cpe libexpat project/libexpatversion unspecified
• cpe netapp/active iq unified managerversion unspecified
• cpe netapp/h300s firmwareversion unspecified
• cpe netapp/h410c firmwareversion unspecified
• cpe netapp/h410s firmwareversion unspecified
• cpe netapp/h500s firmwareversion unspecified
• cpe netapp/h700s firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2022-43680

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2022-43680

  30-day exploitation probability 2.5%

  first.org
• NIST NVDVulnerability recordCVE-2022-43680

  In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

  nvd.nist.gov

References

• Mailing List · openwall.com
• Mailing List · openwall.com
• Exploit · github.com
• Exploit · github.com
• Exploit · github.com
• Mailing List · lists.debian.org
• Mailing List · lists.fedoraproject.org
• Mailing List · lists.fedoraproject.org