CVE-2022-24191

Katalog CVE

CVSS 5.5 · Medium EPSS 0,74%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada htmldoc project htmldoc, fedoraproject fedora. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow.

Rincian

Terbit di NVD

4 April 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,74% peluang dieksploitasi; lebih tinggi dari 53,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/michaelrsweet/htmldoc/issues/470 exploit · issue tracking · patch · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RPDZLHOMPSA2...