Bug 13540

Please patch CVEs for package htmldoc version 1.9.9
  
INFO (CVEs are): htmldoc 1.9.9
 cves found
CVE-2021-23165
Desc: A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary code and denial of service.
Link: https://nvd.nist.gov/vuln/detail/CVE-2021-23165
Severity: CRITICAL
CVE-2021-40985
Desc: A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp.
Link: https://nvd.nist.gov/vuln/detail/CVE-2021-40985
Severity: MEDIUM
CVE-2022-0137
Desc: A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries.
Link: https://nvd.nist.gov/vuln/detail/CVE-2022-0137
Severity: MEDIUM
CVE-2022-24191
Desc: In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow.
Link: https://nvd.nist.gov/vuln/detail/CVE-2022-24191
Severity: MEDIUM
CVE-2022-28085
Desc: A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdf_write_names in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service (DoS).
Link: https://nvd.nist.gov/vuln/detail/CVE-2022-28085
Severity: HIGH