{"id":"CVE-2024-45508","aliases":["DEBIAN-CVE-2024-45508","EUVD-2024-41517","GHSA-jmwj-mmwj-qm9h","MGASA-2024-0353","UBUNTU-CVE-2024-45508","USN-7225-1","openSUSE-SU-2024:0303-1","openSUSE-SU-2024:0304-1","openSUSE-SU-2024:14308-1","openSUSE-SU-2026:20219-1"],"status":"published","title":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an...","description":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.007,"percentile":0.53454,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2024-09-01T00:00:00Z","modified":"2026-11-02T12:02:49Z","fixes":[{"ecosystem":"Debian:13","package":"htmldoc","fixed_in":["1.9.18-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"htmldoc","fixed_in":["1.9.18-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"htmldoc","fixed_in":["1.8.27-8ubuntu1+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"htmldoc","fixed_in":["1.8.27-8ubuntu1.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"htmldoc","fixed_in":["1.9.2-1ubuntu0.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"htmldoc","fixed_in":["1.9.7-1ubuntu0.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"htmldoc","fixed_in":["1.9.15-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"htmldoc","fixed_in":["1.9.17-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP6","package":"htmldoc","fixed_in":["1.9.16-bp156.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"htmldoc","fixed_in":["1.9.16-bp156.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP5","package":"htmldoc","fixed_in":["1.9.16-bp155.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"htmldoc","fixed_in":["1.9.16-bp155.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"htmldoc","fixed_in":["1.9.18-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.16-1","1.9.17-1","1.9.18-1","1.9.18-2","1.9.18-3","1.9.19-1","1.9.20-1","1.9.21-1","1.9.22-1","1.9.23-1","1.9.24-1","1.9.25-1"]},{"source":"osv","ecosystem":"Debian:13","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-2"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15-3.1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-8ubuntu1+esm4"}]}],"versions":["1.8.27-8ubuntu1","1.8.27-8ubuntu1+esm1","1.8.27-8ubuntu1+esm2","1.8.27-8ubuntu1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-8ubuntu1.1+esm3"}]}],"versions":["1.8.27-8ubuntu1","1.8.27-8ubuntu1.1","1.8.27-8ubuntu1.1+esm1","1.8.27-8ubuntu1.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-1ubuntu0.2+esm2"}]}],"versions":["1.8.27-8ubuntu2","1.8.27-8ubuntu3","1.9.2-1","1.9.2-1ubuntu0.1","1.9.2-1ubuntu0.2","1.9.2-1ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-1ubuntu0.3+esm2"}]}],"versions":["1.9.3-1","1.9.7-1","1.9.7-1build1","1.9.7-1ubuntu0.2","1.9.7-1ubuntu0.3","1.9.7-1ubuntu0.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15-1ubuntu0.1~esm1"}]}],"versions":["1.9.11-4","1.9.12-1","1.9.13-1","1.9.14-1","1.9.15-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17-1ubuntu0.1~esm1"}]}],"versions":["1.9.16-1","1.9.17-1","1.9.17-1build2","1.9.17-1build3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-8ubuntu1+esm4"}]}],"versions":["1.8.27-8ubuntu1","1.8.27-8ubuntu1+esm1","1.8.27-8ubuntu1+esm2","1.8.27-8ubuntu1+esm3"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-8ubuntu1.1+esm3"}]}],"versions":["1.8.27-8ubuntu1","1.8.27-8ubuntu1.1","1.8.27-8ubuntu1.1+esm1","1.8.27-8ubuntu1.1+esm2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-1ubuntu0.2+esm2"}]}],"versions":["1.8.27-8ubuntu2","1.8.27-8ubuntu3","1.9.2-1","1.9.2-1ubuntu0.1","1.9.2-1ubuntu0.2","1.9.2-1ubuntu0.2+esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-1ubuntu0.3+esm2"}]}],"versions":["1.9.3-1","1.9.7-1","1.9.7-1build1","1.9.7-1ubuntu0.2","1.9.7-1ubuntu0.3","1.9.7-1ubuntu0.3+esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15-1ubuntu0.1~esm1"}]}],"versions":["1.9.11-4","1.9.12-1","1.9.13-1","1.9.14-1","1.9.15-1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17-1ubuntu0.1~esm1"}]}],"versions":["1.9.16-1","1.9.17-1","1.9.17-1build2","1.9.17-1build3"],"bundled":9},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.16-bp156.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.16-bp156.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.16-bp155.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.16-bp155.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.18-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"htmldoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.23-bp160.1.1"}]}],"bundled":2}],"products":[{"vendor":"htmldoc","product":"htmldoc"},{"vendor":"htmldoc_project","product":"htmldoc"}],"references":[{"url":"https://github.com/michaelrsweet/htmldoc/issues/528","tags":["Exploit","Issue Tracking","Patch","report"]},{"url":"https://github.com/michaelrsweet/htmldoc/commit/2d5b2ab9ddbf2aee2209010cebc11efdd1cab6e2","tags":["Patch","fix","report"]},{"url":"https://github.com/michaelrsweet/htmldoc/blob/2d5b2ab9ddbf2aee2209010cebc11efdd1cab6e2/CHANGES.md","tags":["Release Notes","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45508","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jmwj-mmwj-qm9h"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45508.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-45508","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0353.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33737","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/RNU4P4P7ZCF5TYOAPMGGBX2KSE6IHZFT/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-45508","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-45508","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7225-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-0137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-24191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-27114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-34033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-34035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-46478","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZGODTNNF6WAHIUNECA2R4KRIX7DLALG7/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230022","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45508","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PS3VK5JTDY5FTLYYYSQWM5OBYO27JOKV/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1232380","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46478","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-45508","description":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.","status":"published","published":"2024-09-01T00:00:00Z","modified":"2024-09-03T15:07:42.016Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:34:08.16279Z"}],"euvd":[{"id":"EUVD-2024-41517","description":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.","status":"published","published":"2024-09-01T00:00:00Z","modified":"2024-09-03T15:07:42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:56:06.067403Z"}],"ghsa":[{"id":"GHSA-jmwj-mmwj-qm9h","title":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an...","description":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.","status":"published","published":"2024-09-02T00:30:34Z","modified":"2024-09-03T18:31:32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:58:09.209202Z"}],"nvd":[{"id":"CVE-2024-45508","description":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.","status":"published","published":"2024-09-01T22:15:13.987Z","modified":"2026-06-17T07:54:20.583Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:10:24.514378Z"}],"osv":[{"id":"CVE-2024-45508","description":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.","status":"published","published":"2024-09-01T00:00:00Z","modified":"2026-10-28T10:58:18.858447139Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:42.790566Z"},{"id":"DEBIAN-CVE-2024-45508","description":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.","status":"published","published":"2024-09-01T22:15:13.987Z","modified":"2026-11-02T12:02:49.758429353Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:43.473331Z"},{"id":"UBUNTU-CVE-2024-45508","description":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.","status":"published","published":"2024-09-01T22:15:00Z","modified":"2026-02-04T03:16:53.340245Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:02.636559Z"},{"id":"MGASA-2024-0353","title":"Updated htmldoc packages fix security vulnerabilities","description":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in\nps-pdf.cxx because of an attempt to strip leading whitespace from a\nwhitespace-only node. (CVE-2024-45508)\nHTMLDOC v1.9.18 contains a buffer overflow in parse_pre\nfunction,ps-pdf.cxx:5681. (CVE-2024-46478)\n","status":"published","published":"2024-11-09T05:17:41Z","modified":"2026-04-16T04:41:29.803363868Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:0303-1","title":"Security update for htmldoc","description":"This update for htmldoc fixes the following issues:\n\n- CVE-2024-45508: Fixed an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node [boo#1230022].\n","status":"published","published":"2024-09-16T14:01:42Z","modified":"2026-02-04T03:45:16.821745Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:0304-1","title":"Security update for htmldoc","description":"This update for htmldoc fixes the following issues:\n\n- CVE-2024-45508: Fixed an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node [boo#1230022].\n","status":"published","published":"2024-09-16T14:01:45Z","modified":"2026-02-04T03:20:03.387263Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:14308-1","title":"htmldoc-1.9.18-2.1 on GA media","description":"These are all security issues fixed in the htmldoc-1.9.18-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-09-04T00:00:00Z","modified":"2026-02-04T04:06:57.198254Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2026:20219-1","title":"Security update for htmldoc","description":"This update for htmldoc fixes the following issues:\n\nChanges in htmldoc:\n\n- CVE-2024-46478: Fixed buffer overflow when handling tabs through the parse_pre function (bsc#1232380).\n\n- version update to 1.9.23:\n  * Fixed a regression in list handling that caused a crash for empty list items\n    (Issue #553)\n  * Fixed a regression in the number of rendered table of contents levels in PDF\n    and PostScript output (Issue #554)\n\n- version update to 1.9.22:\n  * Added a \"--without-http\" configure option to build without CUPS HTTP/HTTPS\n    support (Issue #547)\n  * Updated HTTP/HTTPS support to work with both CUPS 2.x and 3.x.\n  * Updated the maximum image dimension to prevent integer overflow on 32-bit\n    platforms (Issue #550)\n  * Updated the HTML parser to correctly report the line number of errors in files\n    with more than 2^32-1 lines (Issue #551)\n  * Fixed a crash bug with certain markdown files (Issue #548)\n  * Fixed an unrestricted recursion bug when reading and formatting HTML (Issue #552)\n\n- version update to 1.9.21\n  * Updated HTTP/HTTPS connection error reporting to include the reason.\n  * Updated markdown parser.\n  * Updated the HTTP/HTTPS connection timeout to 5 minutes (Issue #541)\n  * Fixed a bug in the new PDF link code (Issue #536)\n  * Fixed a bug in the number-up code (Issue #539)\n  * Fixed a regression in leading whitespace handling (Issue #540)\n  * Fixed a bug in numbered heading support (Issue #543)\n  * Fixed a bug with setting the header on the first page (Issue #544)\n  * Fixed paths in the HTMLDOC snap (Issue #545)\n\n- update to 1.9.20:\n  * Fix a regression that caused spaces to disappear between some words\n  * Fix resolution of relative links within a document\n\n- includes changes from 1.9.19:\n  * Add support for ‘file’ method in links\n  * Update markdown support code to mmd\n  * Fix hyperlinks to subfolders\n  * Fix export of UTF-8 HTML\n  * Fix handling of whitespace-only nodes\n  * Fix case sensitivity of link targets\n","status":"published","published":"2026-02-13T16:07:48Z","modified":"2026-03-23T04:54:48.177569Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"USN-7225-1","title":"HTMLDOC vulnerabilities","description":"It was discovered that HTMLDOC incorrectly handled memory in the\nimage_set_mask, git_read_lzw, write_header and write_node functions, which\ncould lead to a heap buffer overflow. An attacker could possibly use this\nissue to cause a denial of service or execute arbitrary code. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. (CVE-2022-0137, CVE-2022-24191, CVE-2022-34033,\nCVE-2022-34035)\n\nIt was discovered that HTMLDOC incorrectly handled memory in the\ngif_get_code function, which could lead to a segmentation fault. If a\nuser or application were tricked into opening a crafted GIF file, an\nattacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,\nUbuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0534)\n\nIt was discovered that HTMLDOC did not perform proper bounds checks on\nimage dimensions when loading JPEG images, which could lead to a buffer\noverflow. If a user or application were tricked into opening a crafted\nJPEG image, an attacker could possibly use this issue to cause a denial\nof service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-27114)\n\nIt was discovered that HTMLDOC incorrectly handled memory in the\npdf_write_names function, which could lead to a heap buffer overflow. If\na user or application were tricked into opening a specially crafted file,\nan attacker could possibly use this issue to cause a denial of service or\nleak sensitive information. This issue only affected Ubuntu 14.04 LTS,\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2022-28085)\n\nIt was discovered that HTMLDOC could be made to write out of bounds when\nattempting to strip whitespace. An attacker could use this issue to cause\na denial of service or execute arbitrary code. (CVE-2024-45508)\n\nIt was discovered that HTMLDOC incorrectly handled memory in the parse_pre\nfunction, which could lead to a heap buffer overflow. If a user or\napplication were tricked into opening a specially crafted file, an attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2024-46478)\n","status":"published","published":"2025-01-22T23:44:08Z","modified":"2026-06-25T13:32:30.759739104Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}