jstjep00/CVE-2024-45490-libexpat-poc

PoC

PoC + Docker test harness for CVE-2024-45490 (libexpat XML_ParseBuffer negative length integer handling issue)

view exploit source poc_in_githubauthor jstjep00published 2026-10-24catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-45490US	high7.5	1.69% (77th)	Exploit	2024-08-30
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.