CVE advisoryCRITICAL
CVE-2022-23852
Expat XML Parser Integer Overflow
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A critical vulnerability exists in the Expat XML parsing library, an integer overflow in `XML_GetBuffer`. This flaw could allow an attacker to cause denial-of-service or impact data confidentiality and integrity if reachable. Given Expat's widespread use as a component in various applications, understanding its presenc