Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8 MGASA-2022-0191 Critical: Htmldoc Buffer Overflow

mageia
Calendar Grey May 19, 2022
Dist Mageia Esm H88
Fedora patches gnome-shell to resolve significant vulnerability linked to buffer overflow. Crucial for maintaining system stability.
There is a vulnerability in htmldoc 1.9.16

Summary

There is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls malloc,'img->width' and 'img->height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer overflow/Address boundary error in the jpeg_read_scanlines function. (CVE-2022-27114)

References

- https://bugs.mageia.org/show_bug.cgi?id=30429

- https://lists.debian.org/debian-lts-announce/2022/05/msg00014.html

- https://www.cve.org/CVERecord?id=CVE-2022-27114

Topics%20covered

Topics Covered

security advisory critical issue update buffer overflow integer overflow htmldoc Mageia

Resolution

SRPMS

- 8/core/htmldoc-1.9.15-1.1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 19 May 2022
URL: https://advisories.mageia.org/MGASA-2022-0191.html
Type: security
CVE: CVE-2022-27114

Topics%20covered

Topics Covered

security advisory critical issue update buffer overflow integer overflow htmldoc Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here