TI-2024-30988 CVE-2024-46478 · GHSA-p9jh-f6vr-wxj3
HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.
Priority HIGH 82
HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.
Htmldoc Project
Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9
Exploited now
Htmldoc Project records in CISA KEVNo Htmldoc Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
23 records
TI-2024-30543 CVE-2024-45508 · GHSA-jmwj-mmwj-qm9h
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because…
Priority HIGH 82
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
TI-2021-13278 CVE-2021-34121 · GHSA-vvmp-35v7-f6q6
An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in…
Priority HIGH 69
An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in toc.cxx, this possibly leads to memory layout information leaking in the data.
TI-2021-13277 CVE-2021-34119 · GHSA-qq6p-768q-h7g2
A flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this…
Priority HIGH 69
A flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this flaw possibly allows possible code execution and a denial of service via a crafted file.
TI-2022-00080 CVE-2022-0137 · GHSA-f2rv-ggmm-f4p9
Memory corruption in michaelrsweet htmldoc
Priority HIGH 68
A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries.
TI-2021-05943 CVE-2021-23165 · GHSA-49mr-vrxv-hmwg
Heap-based buffer overflow in htmldoc
Priority MEDIUM 48
A flaw was found in htmldoc before v1.9.12.
TI-2021-05939 CVE-2021-23158 · GHSA-hgcq-f5fx-5qp6
Double free in htmldoc
Priority MEDIUM 47
A flaw was found in htmldoc in v1.9.12.
TI-2021-03597 CVE-2021-20308 · GHSA-pmv7-7c58-mhrx
Integer overflow in htmldoc
Priority MEDIUM 47
Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181.
TI-2021-19468 CVE-2021-43579 · GHSA-999x-mjp8-5gfp
A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote…
Priority MEDIUM 44
A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file.
TI-2021-05971 CVE-2021-23206 · GHSA-h5p5-cjw3-9266
Stack-based buffer overflow in htmldoc
Priority LOW 37
A flaw was found in htmldoc in v1.9.12 and prior.
TI-2021-05956 CVE-2021-23180 · GHSA-77xx-wx8p-7pfj
NULL pointer dereference in htmldoc
Priority LOW 37
A flaw was found in htmldoc in v1.9.12 and before.
TI-2022-15014 CVE-2022-34035 · GHSA-pw49-cjr4-3pqr
HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.
Priority LOW 36
HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.
TI-2022-15013 CVE-2022-34033 · GHSA-3vvp-qmqj-rgmg
HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273.
Priority LOW 36
HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273.
TI-2022-10903 CVE-2022-28085 · GHSA-xhgj-p5p6-x24h
A flaw was found in htmldoc commit 31f7804.
Priority LOW 36
A flaw was found in htmldoc commit 31f7804.
TI-2021-08548 CVE-2021-26948 · GHSA-2crh-849q-gg8v
NULL pointer dereference in htmldoc
Priority LOW 36
Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.
TI-2021-08108 CVE-2021-26259 · GHSA-6v56-6f3p-gxhq
Out-of-bounds write in htmldoc
Priority LOW 36
A flaw was found in htmldoc in v1.9.12.
TI-2021-08102 CVE-2021-26252 · GHSA-xfrq-7xgg-w3v5
Out-of-bounds write in htmldoc
Priority LOW 36
A flaw was found in htmldoc in v1.9.12.
TI-2021-05960 CVE-2021-23191 · GHSA-rh6g-g88g-qmfg
NULL pointer dereference in htmldoc
Priority LOW 36
A security issue was found in htmldoc v1.9.12 and before.
TI-2019-14145 CVE-2019-19630 · GHSA-45vc-mrxr-qgr2
HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in…
Priority LOW 36
HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.
TI-2022-10264 CVE-2022-27114 · GHSA-2ff5-43qf-52rc
There is a vulnerability in htmldoc 1.9.16.
Priority LOW 27
There is a vulnerability in htmldoc 1.9.16.
TI-2022-00454 CVE-2022-0534 · GHSA-f9qm-5g8q-g45w
Out-of-bounds read in htmldoc
Priority LOW 27
A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening a malicious GIF file, which can result in a crash (segmentation fault).
TI-2021-17855 CVE-2021-40985 · GHSA-vfx2-gpvv-rwcm
A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a…
Priority LOW 27
A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp.
TI-2022-08121 CVE-2022-24191 · GHSA-88v7-976w-9hc8
In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer…
Priority LOW 26
In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow.