libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

出典: OSV.dev (Open Source Vulnerabilities) OSV

Alpine:v3.21 expat

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-r0"}]}]

Alpine:v3.22 expat

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-r0"}]}]

Alpine:v3.23 expat

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-r0"}]}]

Alpine:v3.24 expat

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-r0"}]}]