ZeroDay Findings
Sign inSign up

Findings

CVE-2026-32776

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

Published Mar 16, 2026 · updated Jul 14, 2026 · libexpat project libexpat

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 16, 2026 · NIST NVD

    Detected

    libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

  2. Jul 14, 2026 · NIST NVD

    Updated

    libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

Affected

  • cpe libexpat project/libexpatversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-32776

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-32776

    libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

    nvd.nist.gov

References