CVE-2022-27114

MEDIUM

Htmldoc - Integer Overflow

Title source: rule

Description

There is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls malloc,'img->width' and 'img->height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer overflow/Address boundary error in the jpeg_read_scanlines function.

Scores

CVSS v3 5.5
EPSS 0.0013
EPSS Percentile 31.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE
CWE-190
Status published

Affected Products (2)

htmldoc_project/htmldoc
debian/debian_linux

Timeline

Published May 09, 2022
Tracked Since Feb 18, 2026