{"id":"CVE-2019-19630","aliases":["DEBIAN-CVE-2019-19630","DLA-2026-1","DLA-2700-1","EUVD-2019-9241","GHSA-45vc-mrxr-qgr2","MGASA-2019-0403","SUSE-SU-2022:14898-1","UBUNTU-CVE-2019-19630","USN-4696-1"],"status":"published","title":"HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when...","description":"HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01135,"percentile":0.66713,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2019-12-08T01:57:28Z","modified":"2026-10-20T10:52:31Z","fixes":[{"ecosystem":"Debian:12","package":"htmldoc","fixed_in":["1.9.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"htmldoc","fixed_in":["1.9.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"htmldoc","fixed_in":["1.9.7-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"htmldoc","fixed_in":["1.8.27-8+deb8u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"htmldoc","fixed_in":["1.9.3-2.1.mga7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"htmldoc","fixed_in":["1.8.27-8ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"htmldoc","fixed_in":["1.8.27-8ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"htmldoc","fixed_in":["1.9.2-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-8+deb8u1"}]}],"versions":["1.8.27-8"]},{"source":"osv","ecosystem":"Debian:9","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-8+deb9u1"}]}],"versions":["1.8.27-8"],"bundled":10},{"source":"osv","ecosystem":"Mageia:7","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2.1.mga7"}]}]},{"source":"osv","ecosystem":"SUSE:Subscription Management Tool 11 SP3","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-170.4.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-8ubuntu1+esm1"}]}],"versions":["1.8.27-8ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-8ubuntu1.1"}]}],"versions":["1.8.27-8ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-1ubuntu0.1"}]}],"versions":["1.8.27-8ubuntu2","1.8.27-8ubuntu3","1.9.2-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-8ubuntu1.1"}]}],"versions":["1.8.27-8ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-1ubuntu0.1"}]}],"versions":["1.8.27-8ubuntu2","1.8.27-8ubuntu3","1.9.2-1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"htmldoc_project","product":"htmldoc"}],"references":[{"url":"https://github.com/michaelrsweet/htmldoc/issues/370","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/12/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FEUT3LG6DWTICKXYAN4SWOQWWCGHPLDJ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MZLVUBON5AYWYTFTJ4HBSHGTQTY7KBN/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/07/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19630"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MZLVUBON5AYWYTFTJ4HBSHGTQTY7KBN/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FEUT3LG6DWTICKXYAN4SWOQWWCGHPLDJ/"},{"url":"https://github.com/advisories/GHSA-45vc-mrxr-qgr2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-19630","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0403.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25876","tags":["report"]},{"url":"https://www.debian.org/lts/security/2019/dla-2026","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214898-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1158802","tags":["report"]},{"url":"https://bugzilla.suse.com/1184424","tags":["report"]},{"url":"https://bugzilla.suse.com/1195758","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0534","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-19630","tags":["report"]},{"url":"https://github.com/michaelrsweet/htmldoc/commit/8a129c520e90fc967351f3e165f967128a88f09c","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4696-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19630","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-19630","description":"HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.","status":"published","published":"2019-12-08T01:57:28Z","modified":"2024-08-05T02:25:12.075Z","updated_at":"2026-11-02T14:20:20.74896Z"}],"euvd":[{"id":"EUVD-2019-9241","description":"HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.","status":"published","published":"2019-12-08T01:57:28Z","modified":"2024-08-05T02:25:12Z","updated_at":"2026-11-03T02:40:24.842572Z"}],"ghsa":[{"id":"GHSA-45vc-mrxr-qgr2","title":"HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when...","description":"HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.","status":"published","published":"2022-05-24T17:02:52Z","modified":"2023-02-01T21:30:24Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:50:56.67974Z"}],"nvd":[{"id":"CVE-2019-19630","description":"HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.","status":"published","published":"2019-12-08T02:15:10.03Z","modified":"2026-06-17T02:26:58.61Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:38.993437Z"}],"osv":[{"id":"CVE-2019-19630","description":"HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.","status":"published","published":"2019-12-08T02:15:10.03Z","modified":"2026-10-20T10:52:31.843840405Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:12.010761Z"},{"id":"DEBIAN-CVE-2019-19630","description":"HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.","status":"published","published":"2019-12-08T02:15:10.03Z","modified":"2026-09-21T07:01:57.174914164Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"UBUNTU-CVE-2019-19630","description":"HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.","status":"published","published":"2019-12-08T02:15:00Z","modified":"2026-02-04T03:54:29.370313Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"DLA-2026-1","title":"htmldoc - security update","status":"published","published":"2019-12-09T00:00:00Z","modified":"2026-03-09T01:18:45.575368Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2700-1","title":"htmldoc - security update","status":"published","published":"2021-07-01T00:00:00Z","modified":"2026-03-09T01:17:59.597184Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2019-0403","title":"Updated htmldoc packages fix security vulnerability","description":"Updated htmldoc packages fix security vulnerability:\n\nIn HTMLDOC, there was a one-byte underflow in htmldoc/ps-pdf.cxx caused by\na floating point math difference between GCC and Clang (CVE-2019-19630).\n","status":"published","published":"2019-12-19T13:44:26Z","modified":"2026-04-16T04:42:48.817229917Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"SUSE-SU-2022:14898-1","title":"Security update for htmldoc","description":"This update for htmldoc fixes the following issues:\n\n- CVE-2019-19630: Fixed stack-based buffer overflow in the hd_strlcpy() function in string.c  via a crafted HTML document (bsc#1158802).\n- CVE-2021-20308: Fixed integer overflow in image_load_gif() (bsc#1184424).\n- CVE-2022-0534: Fixed stack out-of-bounds read in gif_get_code() when opening a malicious GIF file results in a segmentation fault (bsc#1195758).\n","status":"published","published":"2022-02-28T13:33:19Z","modified":"2026-02-04T04:31:39.952462Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-4696-1","title":"htmldoc vulnerability","description":"It was discovered that HTMLDOC incorrectly handled certain HTML files.\nAn attacker could possibly use this issue to cause a denial of service.\n","status":"published","published":"2021-01-18T14:21:52Z","modified":"2026-02-10T04:42:02Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}