cve/2024/CVE-2024-45492.md

CVE-2024-45492

Description

An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).

POC

Reference

No PoCs from references.

Github

• https://github.com/Hubert2718/ImageWebhookScaner
• https://github.com/TaiYou-TW/TaiYou-TW
• https://github.com/adegoodyer/kubernetes-admin-toolkit
• https://github.com/ere6u5/-containerization-security-assessment-
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/ghostbyt3/patch-tuesday
• https://github.com/robertsirc/sle-bci-demo