PT-2022-21979 · Htmldoc+4 · Htmldoc+4

Dramthy · Published 2021-05-07 · Updated 2025-01-22 · CVE-2022-34035

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HTMLDoc versions 1.9.12 and below

Description A heap overflow issue was discovered in HTMLDoc via the e node in htmldoc/htmldoc/html.cxx:588. This issue can potentially be exploited.

Recommendations For HTMLDoc versions 1.9.12 and below, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Use After Free

Weakness Enumeration

CWE-787

CWE-416

Related Identifiers

ALT-PU-2022-2627

ALT-PU-2022-2729

BDU:2025-01899

BDU:2025-06262

CVE-2022-34035

USN-7225-1

Affected Products

Alt Linux

Debian

Htmldoc

Linuxmint

Ubuntu

References · 29

• 🔥 https://github.com/michaelrsweet/htmldoc/issues/426 · Exploit
• https://github.com/michaelrsweet/htmldoc/commit/a0014be47d614220db111b360fb6170ef6f3937e · Patch
• https://github.com/michaelrsweet/htmldoc/commit/ee778252faebb721afba5a081dd6ad7eaf20eef3 · Patch
• https://ubuntu.com/security/CVE-2024-45508 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0534 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06262 · Security Note
• https://ubuntu.com/security/CVE-2022-24191 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46478 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-34035 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-34035 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-28085 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52998 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-34035 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-27114 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7225-1 · Vendor Advisory