CVE-2022-40674
expat: libexpat before 2.4.9 has a use-after-free in the doContent function inxmlparse.c.
CVE-2022-40674 is fixed in 13 products on 1 platform, first by expat 2.2.9-1ubuntu0.5, released September 14, 2022. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
8.1
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0225
83rd percentile
libexpat before 2.4.9 has a use-after-free in the doContent function inxmlparse.c.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| expat · Debian 11.6 (bullseye) | 2.2.10-2+deb11u4 | DSA-5236-1 | Sep 22, 2022 |
| expat · Debian 12.15 (bookworm) | 2.4.8-2 | DEBIAN-CVE-2022-40674 | Sep 14, 2022 |
| expat · Debian 13.5 (trixie) | 2.4.8-2 | DEBIAN-CVE-2022-40674 | Sep 14, 2022 |
| expat · Debian 14 | 2.4.8-2 | DEBIAN-CVE-2022-40674 | Sep 14, 2022 |
| expat · RHEL 8 | 0:2.2.5-8.el8_6.3 | RHSA-2022:6878 | Oct 11, 2022 |
| expat · RHEL 9 | 0:2.2.10-12.el9_0.3 | RHSA-2022:6838 | Oct 6, 2022 |
| expat · Ubuntu 18.04.6 LTS (bionic) | 2.2.5-3ubuntu0.8 | expat 2.2.5-3ubuntu0.8 | Oct 24, 2022 |
| expat · Ubuntu 20.04 LTS (focal) | 2.2.9-1ubuntu0.5 | expat 2.2.9-1ubuntu0.5 | Sep 14, 2022 |
| expat · Ubuntu 22.04.1 LTS (jammy) | 2.4.7-1ubuntu0.1 | expat 2.4.7-1ubuntu0.1 | Sep 14, 2022 |
| expat · Ubuntu 24.10 (oracular) | 2.5.0-1 | expat 2.5.0-1 | Jan 16, 2026 |
| expat · Ubuntu 25.04 (plucky) | 2.5.0-1 | expat 2.5.0-1 | Jan 16, 2026 |
| expat · almalinux 8 | 2.2.5-8.el8_6.3 | ALSA-2022:6878 | Oct 11, 2022 |
| expat · almalinux 9 | 2.2.10-12.el9_0.3 | ALSA-2022:6838 | Oct 6, 2022 |
| expat · amzn 2023 | 2.5.0-1.amzn2023.0.2 | ALAS2023-2023-058 | Feb 17, 2023 |
| expat · ol 8 | 0:2.2.5-8.0.1.el8_6.3 | ELSA-2022-6878 | Oct 11, 2022 |
| expat · ol 9 | 0:2.2.10-12.el9_0.3 | ELSA-2022-6838 | Oct 6, 2022 |
| expat · rocky 8 | 0:2.2.5-8.el8_6.3 | RLSA-2022:6878 | Oct 11, 2022 |
| expat · rocky 9 | 0:2.2.10-12.el9_0.3 | RLSA-2022:6838 | Oct 6, 2022 |
| expat-debuginfo · amzn 2023 | 2.5.0-1.amzn2023.0.2 | ALAS2023-2023-058 | Feb 17, 2023 |
| expat-debugsource · amzn 2023 | 2.5.0-1.amzn2023.0.2 | ALAS2023-2023-058 | Feb 17, 2023 |
| expat-devel · RHEL 8 | 0:2.2.5-8.el8_6.3 | RHSA-2022:6878 | Oct 11, 2022 |
| expat-devel · RHEL 9 | 0:2.2.10-12.el9_0.3 | RHSA-2022:6838 | Oct 6, 2022 |
| expat-devel · almalinux 8 | 2.2.5-8.el8_6.3 | ALSA-2022:6878 | Oct 11, 2022 |
| expat-devel · almalinux 9 | 2.2.10-12.el9_0.3 | ALSA-2022:6838 | Oct 6, 2022 |
| expat-devel · amzn 2023 | 2.5.0-1.amzn2023.0.2 | ALAS2023-2023-058 | Feb 17, 2023 |
| expat-devel · ol 8 | 0:2.2.5-8.0.1.el8_6.3 | ELSA-2022-6878 | Oct 11, 2022 |
| expat-devel · ol 9 | 0:2.2.10-12.el9_0.3 | ELSA-2022-6838 | Oct 6, 2022 |
| expat-static · amzn 2023 | 2.5.0-1.amzn2023.0.2 | ALAS2023-2023-058 | Feb 17, 2023 |
| firefox · RHEL 8 | 0:102.3.0-7.el8_6 | RHSA-2022:7024 | Oct 18, 2022 |
| firefox · RHEL 9 | 0:102.3.0-7.el9_0 | RHSA-2022:7020 | Oct 18, 2022 |
| firefox · Ubuntu 18.04.6 LTS (bionic) | 107.0+build2-0ubuntu0.18.04.1 | firefox 107.0+build2-0ubuntu0.18.04.1 | Nov 15, 2022 |
| firefox · Ubuntu 20.04 LTS (focal) | 107.0+build2-0ubuntu0.20.04.1 | firefox 107.0+build2-0ubuntu0.20.04.1 | Dec 22, 2022 |
| firefox · almalinux 8 | 102.3.0-7.el8_6.alma | ALSA-2022:7024 | Oct 18, 2022 |
| firefox · almalinux 9 | 102.3.0-7.el9_0.alma | ALSA-2022:7020 | Oct 18, 2022 |
| firefox · ol 8 | 0:102.3.0-7.0.1.el8_6 | ELSA-2022-7024 | Oct 20, 2022 |
| firefox · ol 9 | 0:102.3.0-7.0.1.el9_0 | ELSA-2022-7020 | Oct 19, 2022 |
| firefox · rocky 8 | 0:102.3.0-7.el8_6 | RLSA-2022:7024 | Oct 18, 2022 |
| firefox-geckodriver · Ubuntu 18.04.6 LTS (bionic) | 107.0+build2-0ubuntu0.18.04.1 | firefox-geckodriver 107.0+build2-0ubuntu0.18.04.1 | Nov 15, 2022 |
| firefox-geckodriver · Ubuntu 20.04 LTS (focal) | 107.0+build2-0ubuntu0.20.04.1 | firefox-geckodriver 107.0+build2-0ubuntu0.20.04.1 | Dec 22, 2022 |
| firefox-mozsymbols · Ubuntu 18.04.6 LTS (bionic) | 107.0+build2-0ubuntu0.18.04.1 | firefox-mozsymbols 107.0+build2-0ubuntu0.18.04.1 | Nov 15, 2022 |
| firefox-mozsymbols · Ubuntu 20.04 LTS (focal) | 107.0+build2-0ubuntu0.20.04.1 | firefox-mozsymbols 107.0+build2-0ubuntu0.20.04.1 | Dec 22, 2022 |
| libexpat1 · Ubuntu 18.04.6 LTS (bionic) | 2.2.5-3ubuntu0.8 | libexpat1 2.2.5-3ubuntu0.8 | Oct 24, 2022 |
| libexpat1 · Ubuntu 20.04 LTS (focal) | 2.2.9-1ubuntu0.5 | libexpat1 2.2.9-1ubuntu0.5 | Sep 14, 2022 |
| libexpat1 · Ubuntu 22.04.1 LTS (jammy) | 2.4.7-1ubuntu0.1 | libexpat1 2.4.7-1ubuntu0.1 | Sep 14, 2022 |
| libexpat1 · Ubuntu 24.10 (oracular) | 2.5.0-1 | libexpat1 2.5.0-1 | Jan 16, 2026 |
| libexpat1 · Ubuntu 25.04 (plucky) | 2.5.0-1 | libexpat1 2.5.0-1 | Jan 16, 2026 |
| mingw-expat · rocky 8 | 0:2.4.8-2.el8 | RLSA-2023:3068 | Dec 27, 2025 |
| mingw32-expat · RHEL 8 | 0:2.4.8-2.el8 | RHSA-2023:3068 | May 16, 2023 |
| mingw32-expat · almalinux 8 | 2.4.8-2.el8 | ALSA-2023:3068 | May 16, 2023 |
| mingw64-expat · RHEL 8 | 0:2.4.8-2.el8 | RHSA-2023:3068 | May 16, 2023 |
| mingw64-expat · almalinux 8 | 2.4.8-2.el8 | ALSA-2023:3068 | May 16, 2023 |
| thunderbird · RHEL 8 | 0:102.3.0-4.el8_6 | RHSA-2022:7023 | Oct 18, 2022 |
| thunderbird · RHEL 9 | 0:102.3.0-4.el9_0 | RHSA-2022:7026 | Oct 18, 2022 |
| thunderbird · almalinux 8 | 102.3.0-4.el8_6.alma | ALSA-2022:7023 | Oct 18, 2022 |
| thunderbird · almalinux 9 | 102.3.0-4.el9_0.alma.plus | ALSA-2022:7026 | Oct 18, 2022 |
| thunderbird · ol 8 | 0:102.3.0-4.0.1.el8_6 | ELSA-2022-7023 | Oct 20, 2022 |
| thunderbird · ol 9 | 0:102.3.0-4.0.1.el9_0 | ELSA-2022-7026 | Oct 19, 2022 |
| thunderbird · rocky 8 | 0:102.3.0-4.el8_6 | RLSA-2022:7023 | Oct 18, 2022 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.