Htmldoc · Htmldoc · CVE-2022-27114
**Name of the Vulnerable Software and Affected Versions**
htmldoc version 1.9.16
**Description**
The issue arises in the `image load jpeg` function within `image.cxx` when it calls `malloc`. The `img->width` and `img->height` values are large enough to cause an integer overflow. As a result, the `malloc` function may return a heap block smaller than the expected size, leading to a buffer overflow or Address boundary error in the `jpeg read scanlines` function.
**Recommendations**
For htmldoc version 1.9.16, consider applying a patch or updating to a newer version that fixes the integer overflow issue in the `image load jpeg` function to prevent buffer overflows.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.