VulnSocial

CVE-2024-8176Disclosure

LOWCVSS 7.5 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-674

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-21); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-21: 1Mentions · 2026-10-07: 1Active Exploitation · 2026-10-07: 1Technical Details · 2026-06-21: 1Technical Details · 2026-10-07: 106-2110-07
Signal classification2 categories
Disclosure
150.0%
Active Exploitation
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-211
Disclosure1
2026-10-071
Active Exploitation1
Full discourse2 posts
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    TRC analysis shows attackers exploiting libexpat vulnerabilities (CVE-2024-8176, CVE-2025-59375) in Hitachi Energy REB500 systems through crafted IEC 61850 messages. Memory exhaustion and stack overflow attacks target critical energy infrastructure. #CloudSecurity :link: Full breakdown: https://aviatrix.ai/threat-research-center/hitachi-energy-reb500-libexpat-vulnerabilities-cve-2024-8176-cve-2025-59375

    Post summary

    The text reports active exploitation of CVE-2024-8176 and CVE-2025-59375 in Hitachi Energy REB500 systems by attackers using crafted IEC 61850 messages, leading to memory exhaustion and stack overflow in critical energy infrastructure. No patch or PoC is mentioned, but technical exploitation details are clearly described.

    0000046
    2.0K followersView on X
  • BREACHSPIDER@breachspider
    Disclosure

    [CVE Analysis] CVE-2024-8176: Recursive XML Parsing Flaw Exposes Hitachi Energy ITT600 SA Explorer to Denial of Service https://breachspider.com/intel/2026-06-21-cve-2024-8176-recursive-xml-parsing-flaw-exposes-hitachi-ene #ICS #OTSecurity #SCADA #CriticalInfrastructure

    Post summary

    The post announces CVE‑2024‑8176, a recursive XML parsing flaw in Hitachi Energy ITT600 SA Explorer that can trigger a denial of service; no PoC, exploit code, active exploitation, or patch details are mentioned.

    0000059
    2.3K followersView on X

Explore more

Back to dashboard