CVE-2021-23191

A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may result in denial of service.

Score

CVSS 3.1 7.8 High

Status

Modified - secalert@redhat.com

Published

2022-03-02

Last modified

2024-08-03

Weaknesses

CWE-476

Affected products

• Htmldoc (Htmldoc Project)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1967022
• https://github.com/michaelrsweet/htmldoc/commit/369b2ea1fd0d0537ba707f20a2f047b6afd2fbdc
• https://github.com/michaelrsweet/htmldoc/issues/415
• https://ubuntu.com/security/CVE-2021-23191