# CVE-2015-1283: Python 3.5: Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome…

CVE-2015-1283 is fixed in 8 products on 2 platforms, first by chromium-browser 44.0.2403.89-0ubuntu1.1195, released July 22, 2015. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2015-1283
- Priority: Routine
- CVSS: 6.8 (Medium)
- EPSS: 0.1832
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 21, 2015
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2015-1283

## Description

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Python 3.5 | 3.5.2 | [Python 3.5 3.5.2](https://patchblox.com/security/data/fix/windows-app/python.python.3.5-3.5.2.md) | Jun 26, 2016 |
| Linux | chromium-browser Ubuntu 24.10 (oracular) | 44.0.2403.89-0ubuntu1.1195 | [chromium-browser 44.0.2403.89-0ubuntu1.1195](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-chromium-browser-44.0.2403.89-0ubuntu1.1195.md) | Jul 22, 2015 |
| Linux | chromium-browser Ubuntu 25.04 (plucky) | 44.0.2403.89-0ubuntu1.1195 | [chromium-browser 44.0.2403.89-0ubuntu1.1195](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-chromium-browser-44.0.2403.89-0ubuntu1.1195.md) | Jul 22, 2015 |
| Linux | chromium-browser-l10n Ubuntu 24.10 (oracular) | 44.0.2403.89-0ubuntu1.1195 | [chromium-browser-l10n 44.0.2403.89-0ubuntu1.1195](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-chromium-browser-l10n-44.0.2403.89-0ubuntu1.1195.md) | Jul 22, 2015 |
| Linux | chromium-browser-l10n Ubuntu 25.04 (plucky) | 44.0.2403.89-0ubuntu1.1195 | [chromium-browser-l10n 44.0.2403.89-0ubuntu1.1195](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-chromium-browser-l10n-44.0.2403.89-0ubuntu1.1195.md) | Jul 22, 2015 |
| Linux | chromium-chromedriver Ubuntu 24.10 (oracular) | 44.0.2403.89-0ubuntu1.1195 | [chromium-chromedriver 44.0.2403.89-0ubuntu1.1195](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-chromium-chromedriver-44.0.2403.89-0ubuntu1.1195.md) | Jul 22, 2015 |
| Linux | chromium-chromedriver Ubuntu 25.04 (plucky) | 44.0.2403.89-0ubuntu1.1195 | [chromium-chromedriver 44.0.2403.89-0ubuntu1.1195](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-chromium-chromedriver-44.0.2403.89-0ubuntu1.1195.md) | Jul 22, 2015 |
| Linux | chromium-codecs-ffmpeg Ubuntu 24.10 (oracular) | 44.0.2403.89-0ubuntu1.1195 | [chromium-codecs-ffmpeg 44.0.2403.89-0ubuntu1.1195](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-chromium-codecs-ffmpeg-44.0.2403.89-0ubuntu1.1195.md) | Jul 22, 2015 |
| Linux | chromium-codecs-ffmpeg Ubuntu 25.04 (plucky) | 44.0.2403.89-0ubuntu1.1195 | [chromium-codecs-ffmpeg 44.0.2403.89-0ubuntu1.1195](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-chromium-codecs-ffmpeg-44.0.2403.89-0ubuntu1.1195.md) | Jul 22, 2015 |
| Linux | chromium-codecs-ffmpeg-extra Ubuntu 24.10 (oracular) | 44.0.2403.89-0ubuntu1.1195 | [chromium-codecs-ffmpeg-extra 44.0.2403.89-0ubuntu1.1195](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-chromium-codecs-ffmpeg-extra-44.0.2403.89-0ubuntu1.1195.md) | Jul 22, 2015 |
| Linux | chromium-codecs-ffmpeg-extra Ubuntu 25.04 (plucky) | 44.0.2403.89-0ubuntu1.1195 | [chromium-codecs-ffmpeg-extra 44.0.2403.89-0ubuntu1.1195](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-chromium-codecs-ffmpeg-extra-44.0.2403.89-0ubuntu1.1195.md) | Jul 22, 2015 |
| Linux | libxmltok1 Ubuntu 18.04.6 LTS (bionic) | 1.2-4ubuntu0.18.04.1~esm4 | [libxmltok1 1.2-4ubuntu0.18.04.1~esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libxmltok1-1.2-4ubuntu0.18.04.1-esm4.md) | Jan 10, 2022 |
| Linux | libxmltok1 Ubuntu 20.04 LTS (focal) | 1.2-4ubuntu0.20.04.1~esm4 | [libxmltok1 1.2-4ubuntu0.20.04.1~esm4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libxmltok1-1.2-4ubuntu0.20.04.1-esm4.md) | Jan 10, 2022 |
| Linux | libxmltok1 Ubuntu 22.04.1 LTS (jammy) | 1.2-4ubuntu0.22.04.1~esm4 | [libxmltok1 1.2-4ubuntu0.22.04.1~esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libxmltok1-1.2-4ubuntu0.22.04.1-esm4.md) | Jan 10, 2022 |
| Linux | libxmltok1t64 Ubuntu 24.04.5 LTS (noble) | 1.2-4.1ubuntu2.24.0.4.1+esm2 | [libxmltok1t64 1.2-4.1ubuntu2.24.0.4.1+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libxmltok1t64-1.2-4.1ubuntu2.24.0.4.1-esm2.md) | Jan 10, 2022 |
| Linux | libxmltok1t64 Ubuntu 24.10 (oracular) | 1.2-4.1ubuntu3.1 | [libxmltok1t64 1.2-4.1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libxmltok1t64-1.2-4.1ubuntu3.1.md) | Sep 4, 2019 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo