PatchTheCVEhtmldoc project vulnerabilities
Recent CVEs affecting htmldoc project products. 2 tracked.
htmldoc project has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-10-24. Highest priority: CVE-2024-45508 (score 58/100).
- CVE-2024-46478 CRITICAL 9.8 DOWNGRADE HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.
- CVE-2024-45508 CRITICAL 9.8 UPGRADE HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to str
FAQ
How do I fix htmldoc project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is htmldoc project being exploited right now?
None of the tracked htmldoc project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which htmldoc project CVE should I patch first?
CVE-2024-45508 currently ranks highest (58/100): HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to str.