CVE-2022-28085 - A flaw was found in htmldoc commit 31f7804

Back Back to CVE browser

HIGH

A flaw was found in htmldoc commit 31f7804

Published Apr 27, 2022

7.8

HIGH

CVSS 3.1

EPSS 1.19%

Description

A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service (DoS).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-32570
Advisory
https://github.com/michaelrsweet/htmldoc/commit/46c8ec2b9bccb8ccabff52d998c5eee77a228348
x_refsource_MISCPatchThird Party Advisory
https://github.com/michaelrsweet/htmldoc/issues/480
x_refsource_MISCExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-32570		Advisory
https://github.com/michaelrsweet/htmldoc/commit/46c8ec2b9bccb8ccabff52d998c5eee77a228348		x_refsource_MISCPatchThird Party Advisory
https://github.com/michaelrsweet/htmldoc/issues/480		x_refsource_MISCExploitIssue TrackingThird Party Advisory