MGASA-2022-0191
- Source
- https://advisories.mageia.org/MGASA-2022-0191.html
- Import Source
- https://advisories.mageia.org/MGASA-2022-0191.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2022-0191
- Related
- Published
- 2022-05-19T07:56:04Z
- Modified
- 2022-05-19T07:13:21Z
- Summary
- Updated htmldoc packages fix security vulnerability
- Details
-
There is a vulnerability in htmldoc 1.9.16. In imageloadjpeg function image.cxx when it calls malloc,'img->width' and 'img->height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer overflow/Address boundary error in the jpegreadscanlines function. (CVE-2022-27114)
- References
- Credits
-
-
- Mageia - COORDINATOR
-