CVE-2024-8176

CVE-2024-8176 is a stack overflow vulnerability in the libexpat library, affecting products that use it for XML parsing, such as Hitachi Energy RTU500 and Apple iOS/macOS. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to trigger a denial of service or potentially memory corruption by crafting XML documents with deeply nested entity references. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.