CVE-2023-52425: Libexpat Project Libexpat

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.

Affected products

• Libexpat Project Libexpat: up to and including 2.5.0

Published 2024-02-04. Last modified 2026-06-17.