TI-2024-30988 CVE-2024-46478 · GHSA-p9jh-f6vr-wxj3
HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.
Priority HIGH 82
HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.
Vulnerabilities
23 records
TI-2024-30543 CVE-2024-45508 · GHSA-jmwj-mmwj-qm9h
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because…
Priority HIGH 82
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.
TI-2021-13278 CVE-2021-34121 · GHSA-vvmp-35v7-f6q6
An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in…
Priority HIGH 69
An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in toc.cxx, this possibly leads to memory layout information leaking in the data.
TI-2021-13277 CVE-2021-34119 · GHSA-qq6p-768q-h7g2
A flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this…
Priority HIGH 69
A flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this flaw possibly allows possible code execution and a denial of service via a crafted file.
TI-2022-00080 CVE-2022-0137 · GHSA-f2rv-ggmm-f4p9
Memory corruption in michaelrsweet htmldoc
Priority HIGH 68
A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries.
TI-2022-15014 CVE-2022-34035 · GHSA-pw49-cjr4-3pqr
HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.
Priority LOW 36
HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.
TI-2022-15013 CVE-2022-34033 · GHSA-3vvp-qmqj-rgmg
HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273.
Priority LOW 36
HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273.
TI-2022-10264 CVE-2022-27114 · GHSA-2ff5-43qf-52rc
There is a vulnerability in htmldoc 1.9.16.
Priority LOW 27
There is a vulnerability in htmldoc 1.9.16.
TI-2022-10903 CVE-2022-28085 · GHSA-xhgj-p5p6-x24h
A flaw was found in htmldoc commit 31f7804.
Priority LOW 36
A flaw was found in htmldoc commit 31f7804.
TI-2022-08121 CVE-2022-24191 · GHSA-88v7-976w-9hc8
In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer…
Priority LOW 26
In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow.
TI-2021-05943 CVE-2021-23165 · GHSA-49mr-vrxv-hmwg
Heap-based buffer overflow in htmldoc
Priority MEDIUM 48
A flaw was found in htmldoc before v1.9.12.
TI-2021-05939 CVE-2021-23158 · GHSA-hgcq-f5fx-5qp6
Double free in htmldoc
Priority MEDIUM 47
A flaw was found in htmldoc in v1.9.12.
TI-2021-08548 CVE-2021-26948 · GHSA-2crh-849q-gg8v
NULL pointer dereference in htmldoc
Priority LOW 36
Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.
TI-2021-08108 CVE-2021-26259 · GHSA-6v56-6f3p-gxhq
Out-of-bounds write in htmldoc
Priority LOW 36
A flaw was found in htmldoc in v1.9.12.
TI-2021-05956 CVE-2021-23180 · GHSA-77xx-wx8p-7pfj
NULL pointer dereference in htmldoc
Priority LOW 37
A flaw was found in htmldoc in v1.9.12 and before.
TI-2021-05960 CVE-2021-23191 · GHSA-rh6g-g88g-qmfg
NULL pointer dereference in htmldoc
Priority LOW 36
A security issue was found in htmldoc v1.9.12 and before.
TI-2021-05971 CVE-2021-23206 · GHSA-h5p5-cjw3-9266
Stack-based buffer overflow in htmldoc
Priority LOW 37
A flaw was found in htmldoc in v1.9.12 and prior.
TI-2021-08102 CVE-2021-26252 · GHSA-xfrq-7xgg-w3v5
Out-of-bounds write in htmldoc
Priority LOW 36
A flaw was found in htmldoc in v1.9.12.
TI-2022-00454 CVE-2022-0534 · GHSA-f9qm-5g8q-g45w
Out-of-bounds read in htmldoc
Priority LOW 27
A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening a malicious GIF file, which can result in a crash (segmentation fault).
TI-2021-19468 CVE-2021-43579 · GHSA-999x-mjp8-5gfp
A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote…
Priority MEDIUM 44
A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file.
TI-2021-17855 CVE-2021-40985 · GHSA-vfx2-gpvv-rwcm
A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a…
Priority LOW 27
A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp.
TI-2021-03597 CVE-2021-20308 · GHSA-pmv7-7c58-mhrx
Integer overflow in htmldoc
Priority MEDIUM 47
Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181.
TI-2019-14145 CVE-2019-19630 · GHSA-45vc-mrxr-qgr2
HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in…
Priority LOW 36
HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.