Skip to main content
Version: v1.4.x

CVE-2026-102633

CVE Details​

Visit the official vulnerability details page for CVE-2026-102633 to learn more.

Initial Publication​

09/29/2026

Last Update​

09/29/2026

Third Party Dependency​

libexpat

NIST CVE Summary​

libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or denial of service.

CVE Severity​

5.9

Our Official Summary​

Investigation is ongoing to determine how this vulnerability affects our products.

Status​

Awaiting Analysis

Affected Products & Versions​

VersionPaletteAIPaletteAI VerteX
1.4.1⚠️ Impacted⚠️ Impacted
1.3.2⚠️ Impacted⚠️ Impacted
1.2.2⚠️ Impacted⚠️ Impacted

Revision History​

No revisions available.