{"uuid": "2ac3bcd7-f053-44f6-b329-e9f4e890a6cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-27114", "type": "seen", "source": "https://t.me/cibsecurity/42198", "content": "\u203c CVE-2022-27114 \u203c\n\nThere is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls malloc,'img-&gt;width' and 'img-&gt;height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer overflow/Address boundary error in the jpeg_read_scanlines function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-09T20:36:48.000000Z"}