Skip to content

libexpat CVE-2021-45960

Moderate
arnaldo2792 published GHSA-gmwc-j47g-qq78 Feb 8, 2022

Package

libexpat (bottlerocket)

Affected versions

< 1.6.0

Patched versions

1.6.0

Description

A left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).

Severity

Moderate

CVE ID

CVE-2021-45960

Weaknesses

No CWEs