CVE-2023-38253

Description

An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.

References

https://lists.fedoraproject.org/archives/list/[email protected]/message/TODROGVCWZ435HQIZE6ARQC5LPQLIA5C/

https://lists.fedoraproject.org/archives/list/[email protected]/message/MKFZQUK7FPWWJQYICDZZ4YWIPUPQ2D3R/

https://lists.fedoraproject.org/archives/list/[email protected]/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED/

https://github.com/tats/w3m/issues/271

https://bugzilla.redhat.com/show_bug.cgi?id=2222779

https://access.redhat.com/security/cve/CVE-2023-38253

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3