CVE-2012-1148

CVE-2012-1148 describes a memory leak vulnerability in the expat XML parser, specifically within the poolGrow function. This flaw, affecting expat versions prior to 2.1.0 and products utilizing it such as Apple Mac OS X, allows attackers to trigger a denial of service by providing specially crafted XML files that cause memory exhaustion during entity expansion. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and can be exploited remotely with low attack complexity, leading to a partial denial of service. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.