CyberRota Analysis
AI-GeneratedThe vulnerability in libexpat versions prior to 2.8.3 allows for an out-of-bounds read, leading to an infinite loop due to improper handling of low and high surrogates during Unicode processing in the *_toUtf16 functions. This could potentially disrupt applications relying on this library, making it important for developers and organizations using libexpat to prioritize updates to mitigate potential denial-of-service risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.