A vulnerability classified as problematic was found in libexpat up to 2.8.1 . This affects an unknown part. Such manipulation leads to integer overflow. This vulnerability is listed as CVE-2026-56404 . The attack must be carried out locally. There is no available exploit. Upgrading the affected component is advised.