CVE-2022-0534

EPSS 0.9%CWE-125

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

09 Feb 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening a malicious GIF file, which can result in a crash (segmentation fault).

Affected products

n/a · htmldoc

References

https://github.com/michaelrsweet/htmldoc/commit/312f0f9c12f26fbe015cd0e6cefa40e4b99017d9 https://github.com/michaelrsweet/htmldoc/issues/463 https://lists.debian.org/debian-lts-announce/2022/02/msg00022.html