CVE-2021-46143

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-25)

CWE

CWE-190

Published

2022-01-06

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• libexpat_project:libexpat
• netapp:active_iq_unified_manager
• netapp:clustered_data_ontap
• netapp:hci_baseboard_management_controller
• netapp:oncommand_workflow_automation
• netapp:solidfire_\&_hci_management_node
• siemens:sinema_remote_connect_server
• tenable:nessus

References

• http://www.openwall.com/lists/oss-security/2022/01/17/3
• https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
• https://github.com/libexpat/libexpat/issues/532
• https://github.com/libexpat/libexpat/pull/538
• https://security.gentoo.org/glsa/202209-24

Check your stackJSON