CVE-2024-8176
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 14, 2025
Updated: Apr 2, 2025
CWE ID 674
Summary
CVE-2024-8176 is a stack overflow vulnerability affecting the libexpat library, which is used for parsing XML documents. The issue arises when libexpat encounters deeply nested entity references in XML documents, causing it to recurse indefinitely and exhausting the stack space. This can lead to denial of service (DoS) attacks or, in certain environments, exploitable memory corruption. The vulnerability is significant because it can impact the reliability and security of applications that rely on libexpat for XML parsing.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.