Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Zzero00Op

#44970of 53,622
5.5Total CVSS
Vulnerabilities · 1
PT-2022-18230
5.5
2022-01-21
Htmldoc · Htmldoc · CVE-2022-27114
**Name of the Vulnerable Software and Affected Versions** htmldoc version 1.9.16 **Description** The issue arises in the `image load jpeg` function within `image.cxx` when it calls `malloc`. The `img->width` and `img->height` values are large enough to cause an integer overflow. As a result, the `malloc` function may return a heap block smaller than the expected size, leading to a buffer overflow or Address boundary error in the `jpeg read scanlines` function. **Recommendations** For htmldoc version 1.9.16, consider applying a patch or updating to a newer version that fixes the integer overflow issue in the `image load jpeg` function to prevent buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.