{"id":"CVE-2019-15903","revision":"d46d98fcb907404dbbc09f0975d0f103","records":[{"revision":"d46d98fcb907404dbbc09f0975d0f103","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2019-15903","aliases":[],"title":"In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buf…","description":"In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.","state":0,"publishedAt":"2019-09-04T05:59:16+00:00","modifiedAt":"2026-10-14T06:50:10.037+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://usn.ubuntu.com/4132-1/","https://seclists.org/bugtraq/2019/Sep/30","https://usn.ubuntu.com/4132-2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/","https://www.debian.org/security/2019/dsa-4530","https://seclists.org/bugtraq/2019/Sep/37","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/","https://seclists.org/bugtraq/2019/Oct/29","https://usn.ubuntu.com/4165-1/","https://www.debian.org/security/2019/dsa-4549","https://access.redhat.com/errata/RHSA-2019:3210","https://access.redhat.com/errata/RHSA-2019:3237","https://seclists.org/bugtraq/2019/Nov/1","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html","https://access.redhat.com/errata/RHSA-2019:3756","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html","https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html","https://seclists.org/bugtraq/2019/Nov/24","https://www.debian.org/security/2019/dsa-4571","https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html","https://security.gentoo.org/glsa/201911-08","https://usn.ubuntu.com/4202-1/","https://seclists.org/bugtraq/2019/Dec/17","https://seclists.org/bugtraq/2019/Dec/21","https://seclists.org/bugtraq/2019/Dec/23","http://seclists.org/fulldisclosure/2019/Dec/23","http://seclists.org/fulldisclosure/2019/Dec/26","http://seclists.org/fulldisclosure/2019/Dec/30","http://seclists.org/fulldisclosure/2019/Dec/27","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","https://usn.ubuntu.com/4335-1/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://github.com/libexpat/libexpat/issues/317","https://github.com/libexpat/libexpat/pull/318","https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43","https://github.com/libexpat/libexpat/issues/342","http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html","https://security.netapp.com/advisory/ntap-20190926-0004/","http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html","http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html","https://support.apple.com/kb/HT210788","https://support.apple.com/kb/HT210790","https://support.apple.com/kb/HT210785","https://support.apple.com/kb/HT210789","https://support.apple.com/kb/HT210793","https://support.apple.com/kb/HT210795","https://support.apple.com/kb/HT210794","https://www.tenable.com/security/tns-2021-11"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2019-15903","license":"CVE Program Terms of Use","key":"cve-program:CVE-2019-15903","identifiers":["CVE-2019-15903"]},"retained":false,"historicalAffected":[]}],"coverage":[]}