Launchpad.net

CVE 2022-40674

libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

CVE-2022-40674 (Candidate) is related to these bugs:

Bug #1994107: Debian CVE-2022-40674: expat: a use-after-free in the doContent function

Summary				In	Importance	Status
	1994107	Debian CVE-2022-40674: expat: a use-after-free in the doContent function		StarlingX	Medium	Fix Released

See the

CVE page on Mitre.org for more details.