CVE-2026-32778

LOW

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.

CVSS v3.1 Score

2.9
LOW
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
LOCAL
Complexity
HIGH
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW
Published: 3/16/2026Modified: 7/14/2026

Related Intelligence (1)

CRITICALVulnerability

Hitachi Energy RTU500

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-155-04.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. If exploited, these vulnerabilities primarily impact product availability, with potential secondary impacts on confidentiality and

CVE-2025-69421CVE-2026-24515
CISA Advisories

References (3)

https://github.com/libexpat/libexpat/pull/1159Issue TrackingPatchhttps://github.com/libexpat/libexpat/pull/1163Issue TrackingPatchhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html