CVE-2026-564072026-06-21libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.