ZeroDay Findings
Sign inSign up

Findings

CVE-2026-32777

libexpat before 2.7.5 allows an infinite loop while parsing DTD content.

Published Mar 16, 2026 · updated Jul 14, 2026 · libexpat project libexpat

libexpat before 2.7.5 allows an infinite loop while parsing DTD content.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 16, 2026 · NIST NVD

    Detected

    libexpat before 2.7.5 allows an infinite loop while parsing DTD content.

  2. Jul 14, 2026 · NIST NVD

    Updated

    libexpat before 2.7.5 allows an infinite loop while parsing DTD content.

Affected

  • cpe libexpat project/libexpatversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-32777

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-32777

    libexpat before 2.7.5 allows an infinite loop while parsing DTD content.

    nvd.nist.gov

References