CVE-2022-0137

HIGH

htmldoc < 1.9.15 - Heap Buffer Overflow in image_set_mask

Title source: llm

A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries.

Core 2

Core References

Exploit, Issue Tracking, Patch, Third Party Advisory issue-tracking

Patch, Third Party Advisory patch

CVSS v3 7.5

EPSS 0.0056

EPSS Percentile 42.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

CWE

CWE-119 CWE-787

Status published

Products (1)

htmldoc_project/htmldoc < 1.9.15

Published Nov 14, 2022

Tracked Since Feb 18, 2026