CVE-2026-327762026-03-16libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.