ITK icon indicating copy to clipboard operation
ITK copied to clipboard

Published 20 hours ago • verified publisher icon InsightSoftwareConsortium

BUG: Prevent integer overflow in potential vulnerable cloned functions

Open npt-1707 opened this issue 5 months ago • 0 comments

Hi Development Team,

I identified a potential integer overflow in clone functions in Modules/ThirdParty/Expat/src/expat/xmlparse.c sourced from libexpat/libexpat. This issue, originally reported in CVE-2022-22822 to CVE-2022-22822, was resolved in the repository via this commit https://github.com/libexpat/libexpat/commit/9f93e8036e842329863bf20395b8fb8f73834d9e.

This PR applies the corresponding patch to fix the vulnerability in this codebase.

Please review at your convenience. Thank you!

npt-1707 avatar May 15 '25 16:05 npt-1707