Description (CNA)
A vulnerability was found in HTACG tidy-html5 5.8.0. It has been declared as problematic. This vulnerability affects the function InsertNodeAsParent of the file src/parser.c. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HTACG / tidy-html5 | affected 5.8.0 |
CWE
CWE-476, CWE-404
References
- https://vuldb.com/?id.313612
- https://vuldb.com/?ctiid.313612
- https://vuldb.com/?submit.601007
- https://github.com/htacg/tidy-html5/issues/1141
- https://github.com/user-attachments/files/19652942/tidy-html5_crash.txt
ADP enrichment
No English description supplied.
No references supplied.