CVE-2022-27114

There is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls malloc,'img->width' and 'img->height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer overflow/Address boundary error in the jpeg_read_scanlines function.

• CWE-190

• https://github.com/michaelrsweet/htmldoc/commit/31f780487e5ddc426888638786cdc47631687275Patch, Third Party Advisory
• https://github.com/michaelrsweet/htmldoc/issues/471Exploit, Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/05/msg00014.htmlMailing List, Third Party Advisory
• https://github.com/michaelrsweet/htmldoc/commit/31f780487e5ddc426888638786cdc47631687275Patch, Third Party Advisory
• https://github.com/michaelrsweet/htmldoc/issues/471Exploit, Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/05/msg00014.htmlMailing List, Third Party Advisory

Published

May 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27107OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Vid…5.4
• CVE-2022-27108OrangeHRM 4.10 is vulnerable to Insecure Direct Object Refer…4.3
• CVE-2022-27109OrangeHRM 4.10 suffers from a Referer header injection redir…5.4
• CVE-2022-2711The Import any XML or CSV File to WordPress plugin before 3.…7.2
• CVE-2022-27110OrangeHRM 4.10 is vulnerable to a Host header injection redi…5.4
• CVE-2022-27111Jfinal_CMS 5.1.0 allows attackers to use the feedback functi…5.4
• CVE-2022-27115In Studio-42 elFinder 2.1.60, there is a vulnerability that …9.8
• CVE-2022-2712In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vul…7.5
• CVE-2022-27123Employee Performance Evaluation v1.0 was discovered to conta…9.8
• CVE-2022-27124Insurance Management System 1.0 was discovered to contain a …9.8
• CVE-2022-27125zbzcms v1.0 was discovered to contain a stored cross-site sc…6.1
• CVE-2022-27126zbzcms v1.0 was discovered to contain a SQL injection vulner…9.8