Expat out-of-bounds read vulnerability (rhsa-2016:2824)
An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, could cause the application to crash or possibly execute arbitrary code with the permissions of the user running the application.
CERT24