CVE-2026-4224 | Python CPython up to 3.14.x Expat Parser ElementDeclHandler stack-based overflow

A vulnerability categorized as critical has been discovered in Python CPython up to 3.14.x. This vulnerability affects the function ElementDeclHandler of the component Expat Parser. Executing a manipulation can lead to stack-based buffer overflow.

This vulnerability is registered as CVE-2026-4224. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.