CVE-2024-45492

On 32-bit platforms where the value of UINT_MAX equals SIZE_MAX, an integer overflow occurs in the m_groupSize variable during XML document processing by the nextScaffoldPart function. The overflow can lead to improper memory operations, such as allocating a buffer that is too small or accessing beyond its boundaries. An attacker can provide a specially crafted XML document that triggers this flaw.

Successful exploitation of this vulnerability may allow an attacker to achieve remote code execution (RCE), compromise data confidentiality and integrity, and cause denial of service (DoS) in applications using the libexpat library on 32-bit platforms.

Update libexpat to version 2.6.3 or newer. Additional information about available patches for specific distributions and systems can be found in the vendor's references and in advisories from Debian LTS, NetApp, and Siemens.

Libexpat (libexpat Project) in versions prior to 2.6.3, on 32-bit platforms (where UINT_MAX equals SIZE_MAX).