CVE-2021-23191: Null Pointer Dereference
A flaw was found in htmldoc in versions prior to 1.9.12. NULL pointer dereference in function imageloadjpeg(),in image.cxx may result in code execution and denial of service.
Reference: https://github.com/michaelrsweet/htmldoc/issues/415
Upstream patch: https://github.com/michaelrsweet/htmldoc/commit/369b2ea1fd0d0537ba707f20a2f047b6afd2fbdc
Other sources
A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function imageloadjpeg() in image.cxx may result in denial of service.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-23191?
CVE-2021-23191 is a security vulnerability found in htmldoc v1.9.12 and before that can result in denial of service due to a NULL pointer dereference in the image_load_jpeg() function.
What is the severity of CVE-2021-23191?
CVE-2021-23191 has a severity level of 7.8 (High).
How does CVE-2021-23191 affect the affected software?
CVE-2021-23191 affects htmldoc v1.9.12 and earlier versions, potentially leading to denial of service.
How can I fix CVE-2021-23191?
To fix CVE-2021-23191, it is recommended to update htmldoc to a version that includes the necessary security patches or apply the provided fixes from the vendor.
Where can I find more information about CVE-2021-23191?
More information about CVE-2021-23191 can be found at the following references: [CVE Details](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23191), [GitHub Issue](https://github.com/michaelrsweet/htmldoc/issues/415), [GitHub Commit](https://github.com/michaelrsweet/htmldoc/commit/369b2ea1fd0d0537ba707f20a2f047b6afd2fbdc).