SEC.co
Emergency

By weakness (CWE)

CWE-821: related vulnerabilities

CVEs classified under CWE-821. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-56132MEDIUM 6.9

    CVE-2026-56132 is a heap-based buffer overflow vulnerability in libexpat, a widely-used XML parsing library. The flaw occurs in the XML prologue parsing logic when multiple parser instances share internal data structures—specifically, the scaffold backing array. Improper reallocation of this shared array can cause a heap buffer overflow, potentially allowing an attacker with local access to crash the application or execute arbitrary code. The vulnerability affects libexpat versions before 2.8.2.