yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2025-59375
Component Overview
Vulnerability Overview
Name
CVE-2025-59375
Source
NVD (
link
)
Debian (
link
)
Description
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
CWEs
CWE-770
Published Date
Sep 15, 2025
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/expat/Changes#L45-L74
Product
https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes
Product
https://github.com/libexpat/libexpat/issues/1018
Exploit
https://github.com/libexpat/libexpat/pull/1034
Issue Tracking
https://issues.oss-fuzz.com/issues/439133977
Exploit
Analysis
#
Affected Component
Analysis
expat
Exploitable
Vulnerability Ratings
#
7.5
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
expat
buildroot
2025.02.x
2.8.5
Not Affected
expat
buildroot
master
2.9.0
Not Affected
expat
openwrt
master
2.8.4-r1
Not Affected
expat
openwrt
openwrt-25.12
2.8.4-r1
Not Affected
expat
yocto
master
2.9.0
Not Affected
expat
yocto
scarthgap
2.8.3
Not Affected