PatchTheCVE: jed winghttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2006-3178: Directory traversal vulnerability in extract_chmLib example program in CHM Lib (chmlib) before 0.38 allows remhttps://patchthecve.com/cve/CVE-2006-3178.htmlhttps://patchthecve.com/cve/CVE-2006-3178.htmlTue, 16 Jun 2026 22:26:33 +0000MEDIUM 5.0: Directory traversal vulnerability in extract_chmLib example program in CHM Lib (chmlib) before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. (dot dot) in their filename.CVE-2005-2659: Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, hashttps://patchthecve.com/cve/CVE-2005-2659.htmlhttps://patchthecve.com/cve/CVE-2005-2659.htmlTue, 16 Jun 2026 22:15:25 +0000HIGH 10.0: Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact and attack vectors.CVE-2005-2930: Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in https://patchthecve.com/cve/CVE-2005-2930.htmlhttps://patchthecve.com/cve/CVE-2005-2930.htmlTue, 16 Jun 2026 22:15:55 +0000MEDIUM 5.1: Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318.CVE-2005-3318: Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products suchttps://patchthecve.com/cve/CVE-2005-3318.htmlhttps://patchthecve.com/cve/CVE-2005-3318.htmlTue, 16 Jun 2026 22:16:42 +0000MEDIUM 5.1: Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930.