CVE-2022-29358

MEDIUM

epub2txt2 v2.04 - Denial of Service via Integer Overflow in _parse_special_tag

Title source: llm

Description

epub2txt2 v2.04 was discovered to contain an integer overflow via the function bug in _parse_special_tag at sxmlc.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted XML file.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

https://github.com/kevinboone/epub2txt2/issues/22

Scores

CVSS v3 5.5

EPSS 0.0057

EPSS Percentile 42.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-190

Status published

Products (1)

epub2txt2_project/epub2txt2 2.04

Published May 25, 2022

Tracked Since Feb 18, 2026