HackerFeeds

CyberSecurity News

Expat 2.8.3 released, fixes vulnerability CVE-2026-72522

Hacker News
· August 11, 2026
Vulnerabilities

AI summary

A new version of Expat, version 2.8.3, has been released. This update addresses a vulnerability identified as CVE-2026-72522. The release is announced on the blog of hartwork.org and discussed on Hacker News. Further details about the vulnerability and the update can be found on the linked blog post and discussion thread.

Vulnerabilities mentioned

CVE-2026-72522
MEDIUM
CVSS 6.2

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.

Read the full article at Hacker Newsblog.hartwork.org/posts/expat-2-8-3-released/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to Hacker News.