CVE-2022-27114: Buffer Overflow
Last updated 27 January 2025
Other sources
There is a vulnerability in htmldoc 1.9.16. In imageloadjpeg function image.cxx when it calls malloc,'img->width' and 'img->height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer overflow/Address boundary error in the jpegreadscanlines function.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-27114?
CVE-2022-27114 is a vulnerability in htmldoc 1.9.16 that can cause an integer overflow and result in a buffer overflow.
What is the severity of CVE-2022-27114?
The severity of CVE-2022-27114 is medium with a CVSS score of 5.5.
How does CVE-2022-27114 affect Htmldoc?
CVE-2022-27114 affects Htmldoc version 1.9.16.
How does CVE-2022-27114 affect Debian Debian Linux?
CVE-2022-27114 affects Debian Debian Linux version 9.0.
How can I fix CVE-2022-27114?
To fix CVE-2022-27114, update htmldoc to a version that includes the fix for the vulnerability.