CVE-2024-50602
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.
02 / AFFECTED SOFTWARE
Affected packages
59 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.
05 / REFERENCES
Further evidence
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50602.json
- https://github.com/libexpat/libexpat/pull/915
- https://lists.debian.org/debian-lts-announce/2025/04/msg00040.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-50602
- https://security.netapp.com/advisory/ntap-20250404-0008/
- https://docs.python.org/release/3.10.16/whatsnew/changelog.html
- https://docs.python.org/release/3.11.11/whatsnew/changelog.html#python-3-11-11
- https://docs.python.org/release/3.12.8/whatsnew/changelog.html#python-3-12-8
- https://docs.python.org/release/3.13.1/whatsnew/changelog.html#python-3-13-1
- https://docs.python.org/release/3.9.21/whatsnew/changelog.html
- https://github.com/python/cpython/issues/126623