CVE-2016-4472

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.

CVSS 3.1

8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

12% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-25)

CWE

CWE-119

Published

2016-06-30

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• canonical:ubuntu_linux
• libexpat_project:libexpat
• mcafee:policy_auditor
• python:python

References

• http://www.securityfocus.com/bid/91528
• http://www.ubuntu.com/usn/USN-3013-1
• https://bugzilla.redhat.com/show_bug.cgi?id=1344251
• https://kc.mcafee.com/corporate/index?page=content&id=SB10365
• https://security.gentoo.org/glsa/201701-21

Check your stackJSON