CVE-2019-15903

CVE-2019-15903 describes a heap-based buffer over-read vulnerability in libexpat versions prior to 2.2.8, affecting projects like libexpat and Python's libexpat. This flaw can be triggered by specially crafted XML input that tricks the parser into prematurely switching parsing modes, leading to a crash when line or column numbers are subsequently requested. Rated 7.5 HIGH, it is a network-exploitable vulnerability with low attack complexity, potentially resulting in a denial of service. While there is no known active exploitation or publicly available exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating awareness within the cybersecurity landscape.