CVE-2022-44311

8.1 highEPSS 1.2%

High (8.1) in html2xhtml project html2xhtml. EPSS 1.2% chance of exploitation in the next 30 days.

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service (DoS) via a crafted html file.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2022-11-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

html2xhtml_project:html2xhtml

References

https://github.com/jfisteus/html2xhtml/issues/19
https://github.com/jfisteus/html2xhtml/issues/19

Check your stack JSON