← All advisories

Unrated severityNVD Advisory· Published Nov 3, 2021· Updated Aug 4, 2024

CVE-2021-40985

CVE-2021-40985

Description

A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

htmldoc/htmldocdescription
Htmldoc/Htmldocllm-fuzzy
Range: <1.9.12
osv-coords2 versions
pkg:rpm/opensuse/htmldoc&distro=openSUSE%20Tumbleweed pkg:rpm/suse/htmldoc&distro=Subscription%20Management%20Tool%2011%20SP3
< 1.9.12-2.1+ 1 more
- (no CPE)range: < 1.9.12-2.1
- (no CPE)range: < 1.8.27-170.4.3.1

Patches

Vulnerability mechanics

References

3

github.com/michaelrsweet/htmldoc/commit/f12b9666e582a8e7b70f11b28e5ffc49ad625d43mitrex_refsource_MISC
github.com/michaelrsweet/htmldoc/issues/444mitrex_refsource_MISC
lists.debian.org/debian-lts-announce/2022/02/msg00022.htmlmitremailing-listx_refsource_MLIST

News mentions

0

No linked articles in our index yet.