{"id":"CVE-2016-4472","revision":"e9e998a32fe54cc190717780491f8504","records":[{"revision":"e9e998a32fe54cc190717780491f8504","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2016-4472","aliases":[],"title":"The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data.  NOTE: this vulnerabili…","description":"The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.","state":0,"publishedAt":"2016-06-30T17:00:00+00:00","modifiedAt":"2026-10-08T21:03:22.774+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.tenable.com/security/tns-2016-20","https://bugzilla.redhat.com/show_bug.cgi?id=1344251","http://www.ubuntu.com/usn/USN-3013-1","http://www.securityfocus.com/bid/91528","https://sourceforge.net/p/expat/code_git/ci/f0bec73b018caa07d3e75ec8dd967f3785d71bde","https://security.gentoo.org/glsa/201701-21","https://kc.mcafee.com/corporate/index?page=content&id=SB10365"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2016-4472","license":"CVE Program Terms of Use","key":"cve-program:CVE-2016-4472","identifiers":["CVE-2016-4472"]},"retained":false,"historicalAffected":[]}],"coverage":[]}