CVE-2005-3318

Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in...

5.1 MediumFix available

Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930.

Exploit likelihood

3.78%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 5.1

Record: CVE-2005-3318
CVSS 2.0: 5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-3318
Updated: 2026-11-02

EUVDEUVD-2005-3317 No score

Record: EUVD-2005-3317
Updated: 2026-11-03

GitHub AdvisoriesGHSA-238q-w3p2-vw4m No score

Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in...

Record: GHSA-238q-w3p2-vw4m
Updated: 2026-11-02

OSV No score

Record: CVE-2005-3318
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-3318 No score

Record: DEBIAN-CVE-2005-3318
Updated: 2026-11-02

Affected products

jed wing chm lib

Affected packages

Affected packages
Package	Affected	Fixed
`chmlib` Debian:12	before 0.37-1	0.37-1
`chmlib` Debian:13	before 0.37-1	0.37-1
`chmlib` Debian:14	before 0.37-1	0.37-1
`chmlib` Debian:3.1 From an advisory covering 3 CVEs	before 0.35-6sarge1, plus listed versions 0.35-6	0.35-6sarge1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-3318 is a medium vulnerability (CVSS 5.1) in Jed Wing Chm Lib, published October 27, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.78%, the 90th percentile. Fixed in chmlib 0.37-1.

References

Show 10 moreShow less