CVE-2025-66382 - Vulnerability Details - OpenCVE

In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00013.

Key SSVC decision points have not yet been added.

Vendors	Products
Libexpat Project	Libexpat

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://www.openwall.com/lists/oss-security/2025/12/02/1
https://github.com/libexpat/libexpat/issues/1076
https://nvd.nist.gov/vuln/detail/CVE-2025-66382
https://www.cve.org/CVERecord?id=CVE-2025-66382

History

Tue, 02 Dec 2025 03:30:00 +0000

Type	Values Removed	Values Added
References		http://www.openwall.com/lists/oss-security/2025/12/02/1

Fri, 28 Nov 2025 12:15:00 +0000

Type	Values Removed	Values Added
Title		libexpat: libexpat: Denial of service via crafted file processing
References		https://nvd.nist.gov/vuln/detail/CVE-2025-66382 https://www.cve.org/CVERecord?id=CVE-2025-66382
Metrics	threat_severity `None`	threat_severity `Low`

Fri, 28 Nov 2025 06:30:00 +0000

Type	Values Removed	Values Added
Description		In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time.
First Time appeared		Libexpat Project Libexpat Project libexpat
Weaknesses		CWE-407
CPEs		cpe:2.3:a:libexpat_project:libexpat::::::::
Vendors & Products		Libexpat Project Libexpat Project libexpat
References		https://github.com/libexpat/libexpat/issues/1076
Metrics		cvssV3_1 `{'score': 2.9, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-11-28T00:00:00.000Z

Updated: 2025-12-02T02:34:18.532Z

Reserved: 2025-11-28T00:00:00.000Z

Link: CVE-2025-66382

Vulnrichment

No data.

NVD

Status : Awaiting Analysis

Published: 2025-11-28T07:15:57.900

Modified: 2025-12-02T03:16:20.340

Link: CVE-2025-66382

Redhat

Severity : Low

Publid Date: 2025-11-28T00:00:00Z

Links: CVE-2025-66382 - Bugzilla

OpenCVE Enrichment

No data.

{"bugzilla": {"description": "libexpat: libexpat: Denial of service via crafted file processing", "id": "2417661", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417661"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.9", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-407", "details": ["A flaw was found in libexpat. This vulnerability allows a denial of service (DoS) by processing a crafted file with an approximate size of 2 MiB, leading to dozens of seconds of processing time."], "name": "CVE-2025-66382", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "expat", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Fix deferred", "package_name": "compat-expat1", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Fix deferred", "package_name": "expat", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "expat", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "expat", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "mingw-expat", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "xmlrpc-c", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "expat", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:jboss_core_services:1", "fix_state": "Fix deferred", "package_name": "expat", "product_name": "Red Hat JBoss Core Services"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2025-11-28T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-66382\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-66382\nhttps://github.com/libexpat/libexpat/issues/1076"], "statement": "The highest threat of this flaw is to system availability. This issue affects systems that process untrusted XML files with libexpat, where a specially crafted file can lead to extended processing times, potentially causing a denial of service.", "threat_severity": "Low"}