Findings

CVE-2024-50602

An issue was discovered in libexpat before 2.6.4.

Published Oct 27, 2024 · updated Oct 15, 2026 · netapp active iq unified manager

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 27, 2024 · NIST NVD

    Detected

    An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

  2. Oct 15, 2026 · NIST NVD

    Updated

    An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

Affected

  • cpe debian/debian linux11.0
  • cpe libexpat project/libexpatversion unspecified
  • cpe netapp/active iq unified managerversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410c firmwareversion unspecified
  • cpe netapp/h410s firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe netapp/h700s firmwareversion unspecified
  • cpe netapp/hci compute nodeversion unspecified
  • cpe netapp/solidfire & hci management nodeversion unspecified
  • cpe netapp/solidfire & hci storage nodeversion unspecified
  • cpe netapp/windows host utilitiesversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2024-50602

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2024-50602

    30-day exploitation probability 1.1%

    first.org
  • NIST NVDVulnerability recordCVE-2024-50602

    An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

    nvd.nist.gov

References

CVE-2024-50602 · ZeroDay Findings