NULL Pointer Deref in libexpat <2.7.5
CVE-2026-32776 Published on March 16, 2026
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.
Weakness Type
NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. NULL pointer dereference issues can occur through a number of flaws, including race conditions, and simple programming omissions.
Products Associated with CVE-2026-32776
Want to know whenever a new CVE is published for Libexpatproject Libexpat? stack.watch will email you.
Affected Versions
libexpat project libexpat:- Before 2.7.5 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.