CVE-2024-35333

A stack-buffer-overflow vulnerability exists in the read_charset_decl function of html2xhtml 1.3. This vulnerability occurs due to improper bounds checking when copying data into a fixed-size stack buffer. An attacker can exploit this vulnerability by providing a specially crafted input to the vulnerable function, causing a buffer overflow and potentially leading to arbitrary code execution, denial of service, or data corruption.

CVSS v3.1

8.4 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.36% chance of exploitation in the next 30 days, 29th percentile

Published

2024-05-29

Updated

2025-02-13

Proof-of-concept exploits (1)

• momo1239/CVE-2024-353330★ · 2024-05-28

References

• CVE Record
• NVD entry

Related

• CVE-2023-24203
• CVE-2023-24204
• CVE-2024-9463
• CVE-2024-3533
• CVE-2024-35339
• CVE-2024-3532