CVE-2026-32778Disclosure(libexpat_project / libexpat)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch libexpat_project libexpat systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.

libexpat_project CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Other references

https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Weakness type (CWE)

CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

libexpat

Threat summary

Patch or workaround signal is available
5 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Disclosure: 4 classified signals
Peaked 3d ago at 2 mentions (2026-03-16); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

libexpat_project

Products

libexpat

Deep dive

Activity timeline5 mentions / 4d

Signal classification2 categories

Disclosure

480.0%

Patch

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-16	2	Disclosure2
2026-03-17	1	Disclosure1
2026-04-01	1	Disclosure1
2026-05-13	1	Patch1

Full discourse5 posts

Ferramentas Linux@Cezar_H_Linux148d
Patch
#SUSE mozjs60 DoS vulnerabilities (CVE-2026-32776, CVE-2026-32777, CVE-2026-32778). Check your system, automate patching with a script, and harden with iptables/AppArmor Read more -> https://tinyurl.com/5xxr7ecx #Security https://t.co/VUQrW8GLfT
Post summary
The tweet announces SUSE mozjs60 DoS CVEs and recommends system checks, applying a patch script, and tightening defenses with iptables/AppArmor, but provides no technical detail or exploit evidence.
0000047
1.5K followersView on X
Matthias Knäpper@knaepp190d
Disclosure
IBM HTTP Server is affected by multiple vulnerabilities due to libexpat (CVE-2026-32776, CVE-2026-32777, CVE-2026-32778) https://tinyurl.com/2y9swh4o
Post summary
IBM HTTP Server is reported to have multiple vulnerabilities tied to libexpat (CVE-2026-32776, CVE-2026-32777, CVE-2026-32778).
0000071
108 followersView on X
PurpleOps@PurpleOps_io206d
Disclosure
📢 𝐍𝐞𝐰 𝐂𝐕𝐄 𝐚𝐧𝐚𝐥𝐲𝐬𝐢𝐬 𝐣𝐮𝐬𝐭 𝐝𝐫𝐨𝐩𝐩𝐞𝐝! Uncover how CVE-2026-32778 enables remote code execution on Windows, its wormable risk, and essential steps to patch and monitor for early signs. 🌐 Explore the write-up → https://www.purple-ops.io/cybersecurity-threat-intelligence-blog/cve-2026-32778-remote-code-execution-windows/ Join the discussion and tell us what you think!
Post summary
A new blog post discloses and analyzes CVE‑2026‑32778, detailing its RCE impact on Windows, wormable nature, and providing patch guidance and monitoring advice.
0000038
95 followersView on X
Infoflowcloud@infoflowcloud206d
Disclosure
🚨*CVE* CVE-2026-32778 libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition. https://www.cve.org/CVERecord?id=CVE-2026-32778 ----- Traducción: CVE-2026-32778 libexpat antes de la 2.7.5 permite una… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑32778, detailing a NULL pointer dereference in libexpat before 2.7.5, with no PoC, exploit, or patch information provided.
0000023
58 followersView on X
CVE@CVEnew206d
Disclosure
CVE-2026-32778 libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition. https://www.cve.org/CVERecord?id=CVE-2026-32778
Post summary
The text announces a NULL pointer dereference vulnerability (CVE-2026-32778) in libexpat versions prior to 2.7.5, triggered on retry after an earlier out‑of‑memory condition.
00000155
56.7K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	libexpat_project	libexpat	-	-	-

Explore more

Back to dashboard libexpat_project CVEs libexpat vulnerabilities

What researchers are saying

CVE-2026-32778

PurpleOps[verified]@PurpleOps_ioDisclosure

A new blog post discloses and analyzes CVE‑2026‑32778, detailing its RCE impact on Windows, wormable nature, and providing patch guidance and monitoring advice.

Ferramentas Linux@Cezar_H_LinuxPatch

The tweet announces SUSE mozjs60 DoS CVEs and recommends system checks, applying a patch script, and tightening defenses with iptables/AppArmor, but provides no technical detail or exploit evidence.

Matthias Knäpper@knaeppDisclosure

IBM HTTP Server is reported to have multiple vulnerabilities tied to libexpat (CVE-2026-32776, CVE-2026-32777, CVE-2026-32778).

Infoflowcloud@infoflowcloudDisclosure

The tweet announces CVE‑2026‑32778, detailing a NULL pointer dereference in libexpat before 2.7.5, with no PoC, exploit, or patch information provided.

CVE@CVEnewDisclosure

The text announces a NULL pointer dereference vulnerability (CVE-2026-32778) in libexpat versions prior to 2.7.5, triggered on retry after an earlier out‑of‑memory condition.