PT-2024-31668

CVE-2024-45508

·

Published

2024-08-28

·

Updated

2026-02-13

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: HTMLDOC versions prior to 1.9.19
Description: The issue is related to an out-of-bounds write in the parse paragraph function in ps-pdf.cxx due to an attempt to strip leading whitespace from a whitespace-only node. This flaw can lead to a security risk.
Recommendations: For versions prior to 1.9.19, update to version 1.9.19 or later to resolve the issue. As a temporary workaround, consider restricting the use of the parse paragraph function in ps-pdf.cxx until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
MGASA-2024-0353
OPENSUSE-SU-2024:0303-1
OPENSUSE-SU-2024:0304-1
OPENSUSE-SU-2024:14308-1
OPENSUSE-SU-2026:20219-1
USN-7225-1
Found an issue in the description? Have something to add? Feel free to write us 👾