PatchTheCVEhtmldoc vulnerabilities and fixes
Recent CVEs affecting htmldoc, with upgrade or downgrade steps. 2 tracked.
htmldoc has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-10-24. Highest priority: CVE-2024-45508 (score 58/100).
- CVE-2024-46478 CRITICAL 9.8 DOWNGRADE HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.
- CVE-2024-45508 CRITICAL 9.8 UPGRADE HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to str
FAQ
How do I fix htmldoc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is htmldoc being exploited right now?
None of the tracked htmldoc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which htmldoc CVE should I patch first?
CVE-2024-45508 currently ranks highest (58/100): HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to str.