CVE catalog

CVE-2016-0718

xmltok library vulnerabilities

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
13.26% · Oct 27, 2026

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianexpatsid2.9.0-1fixed
Debianexpatforky2.9.0-1fixed
Debianexpattrixie2.8.3-1~deb13u1fixed
Debianexpattrixie-security2.9.0-1~deb13u1fixed
Debianexpatbookworm2.5.0-1+deb12u2fixed
Debianexpatbookworm-security2.5.0-1+deb12u5fixed
Debianlibxmltokbookworm1.2-4vulnerable
Debianfirefox-esrsid153.6.0esr-1not affected
Debianfirefox-esrforky153.5.1esr-1not affected
Debianfirefox-esrtrixie140.15.0esr-1~deb13u1not affected
Debianfirefox-esrtrixie-security153.6.0esr-1~deb13u1not affected
Debianfirefox-esrbookworm140.12.0esr-1~deb12u1not affected
Debianfirefox-esrbookworm-security153.6.0esr-1~deb12u2not affected
UbuntulibxmltoknobleNot reportedvulnerable
Ubuntuexpatnoble2.1.1-2fixed
Ubuntufirefox-esrnobleNot reportednot affected
Ubuntulibxmltoknoble1.2-4.1ubuntu2.24.0.4.1+esm2fixed
Ubuntulibxmltok1-devnoble1.2-4.1ubuntu2.24.0.4.1+esm2fixed
Ubuntulibxmltok1t64noble1.2-4.1ubuntu2.24.0.4.1+esm2fixed
CpefirefoxNot reported48.0fixed
Cpemac_os_xNot reportedNot reportedunknown
Cpelinux_enterprise_debuginfoNot reportedNot reportedunknown
Cpestudio_onsiteNot reportedNot reportedunknown
Cpelinux_enterprise_serverNot reportedNot reportedunknown
Cpelinux_enterprise_software_development_kitNot reportedNot reportedunknown
CpeleapNot reportedNot reportedunknown
Cpelinux_enterprise_desktopNot reportedNot reportedunknown
Cpeubuntu_linuxNot reportedNot reportedunknown
CpelibexpatNot reported2.2.0fixed
Cpedebian_linuxNot reportedNot reportedunknown
CpeopensuseNot reportedNot reportedunknown
Alpineexpat3.42.1.1-r1fixed
Ubuntufirefox14.0424.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0425.0+build3-0ubuntu0.13.10.1vulnerable
Ubuntufirefox14.0428.0~b2+build1-0ubuntu2vulnerable
Ubuntufirefox14.0428.0+build1-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu1vulnerable
Ubuntufirefox14.0428.0+build2-0ubuntu2vulnerable
Ubuntufirefox14.0429.0+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0430.0+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0431.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0432.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0433.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0434.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0435.0+build3-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0435.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0+build2-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0436.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0436.0.4+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.1+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0437.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0438.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0+build5-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0439.0.3+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0440.0+build4-0ubuntu0.14.04.4vulnerable
Ubuntufirefox14.0440.0.3+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0441.0.2+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0442.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0443.0.4+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0.1+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0444.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0445.0+build2-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0445.0.1+build1-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0445.0.2+build1-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0446.0+build5-0ubuntu0.14.04.2vulnerable
Ubuntufirefox14.0446.0.1+build1-0ubuntu0.14.04.3vulnerable
Ubuntufirefox14.0447.0+build3-0ubuntu0.14.04.1vulnerable
Ubuntufirefox14.0448.0+build2-0ubuntu0.14.04.1fixed
Ubuntufirefox16.0441.0.2+build2-0ubuntu1vulnerable
Ubuntufirefox16.0442.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0444.0+build3-0ubuntu2vulnerable
Ubuntufirefox16.0444.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0444.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0446.0+build5-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0446.0.1+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0447.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0448.0+build2-0ubuntu0.16.04.1fixed
Ubuntuexpat14.042.1.0-4vulnerable
Ubuntuexpat14.042.1.0-4ubuntu1vulnerable
Ubuntuexpat14.042.1.0-4ubuntu1.1vulnerable
Ubuntuexpat14.042.1.0-4ubuntu1.2fixed
Ubuntuexpat16.042.1.0-7vulnerable
Ubuntuexpat16.042.1.0-7ubuntu0.16.04.1fixed
Suseexpatlinux micro 6.02.8.5-159998.1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianexpatsourcesid2.1.1-2not yet assignedNot reportedNot reported
Debianexpatsourceforky2.1.1-2not yet assignedNot reportedNot reported
Debianexpatsourcetrixie2.1.1-2not yet assignedNot reportedNot reported
Debianexpatsourcebookworm2.1.1-2not yet assignedNot reportedNot reported
Debianlibxmltoksourcebookworm(unfixed)not yet assignedNot reportedNot reported
Debianfirefox-esrsourcesidNot affectedunimportantNot reportedNot reported
Debianfirefox-esrsourceforkyNot affectedunimportantNot reportedNot reported
Debianfirefox-esrsourcetrixieNot affectedunimportantNot reportedNot reported
Debianfirefox-esrsourcebookwormNot affectedunimportantNot reportedNot reported
Ubuntuexpatdebnoble2.1.1-2Not reportedNot reportedNot reported
Ubuntulibxmltokdebnoble1.2-4.1ubuntu2.24.0.4.1+esm2Not reportedNot reportedNot reported
Ubuntulibxmltok1-devdebnoble1.2-4.1ubuntu2.24.0.4.1+esm2Not reportedNot reportedNot reported
Ubuntulibxmltok1t64debnoble1.2-4.1ubuntu2.24.0.4.1+esm2Not reportedNot reportedNot reported
CpefirefoxcpeNot reported48.0Not reportedNVD-CVE-2016-0718Not reported
CpelibexpatcpeNot reported2.2.0Not reportedNVD-CVE-2016-0718Not reported
Alpineexpatapk3.42.1.1-r1Not reportedALPINE-CVE-2016-0718Not reported
Ubuntufirefoxdeb14.0448.0+build2-0ubuntu0.14.04.1Not reportedUSN-3044-1Not reported
Ubuntufirefoxdeb16.0448.0+build2-0ubuntu0.16.04.1Not reportedUSN-3044-1Not reported
Ubuntuexpatdeb14.042.1.0-4ubuntu1.2Not reportedUSN-2983-1Not reported
Ubuntuexpatdeb16.042.1.0-7ubuntu0.16.04.1Not reportedUSN-2983-1Not reported
Suseexpatrpmlinux micro 6.02.8.5-159998.1.1Not reportedSUSE-SU-2026:24323-1Not reported

Notes

[bookworm] libxmltok: Minor issue, no runtime dependencies left

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [expat]Unknown
    Details (4)
    • 2.5.0-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 2.1.1-2

      usn · expat · debian · bookworm; usn · expat · debian · 12

    • 2.5.0-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 2.1.1-2

      usn · expat · debian · bookworm; usn · expat · debian · 12

    • 2.5.0-1+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.1.1-2

      usn · expat · debian · bookworm; usn · expat · debian · 12

    • 2.5.0-1+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.1.1-2

      usn · expat · debian · bookworm; usn · expat · debian · 12

  • [firefox-esr]Unknown
    Details (4)
    • 140.12.0esr-1~deb12u1 · amd64 · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · arm64 · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Not affected

      usn · firefox-esr · debian · bookworm

Next results

Observed:

References