Skip to content
OpenAdvisories
Unscored DLA-2928-1 3 CVEs

htmldoc - security update

Published Feb 26, 2022 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 htmldoc 1.8.27-8+deb9u2

Vulnerabilities 3

  • Unscored —

    A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted B…

  • Unscored —
    CVE-2021-43579 Public exploit

    A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim c…

  • Unscored —

    A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() an…