CVE-2021-26948

HIGH

htmldoc v1.9.11 and before - Null Pointer Dereference via Crafted HTML File

Title source: llm

Description

Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Patch, Third Party Advisory

https://github.com/michaelrsweet/htmldoc/issues/410

Scores

CVSS v3 7.8

EPSS 0.0079

EPSS Percentile 51.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-476 CWE-479

Status published

Products (1)

htmldoc_project/htmldoc 1.9.11

Published Mar 03, 2022

Tracked Since Feb 18, 2026