Approved changes feed: RSS · Atom

cpe:2.3:a:tats:w3m:0.5.3:*:*:*:*:*:*:*

part: a version: 0.5.3 update: *

VendorTats (31036f7a-a59b-539e-946e-79201c70503f)
ProductW3M (ab2bc55d-d60b-5e60-a8f0-4c1ebf90d8e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/w3m purl2cpe 2026-06-01 10:14:56.803112
pkg:deb/ubuntu/w3m purl2cpe 2026-06-01 10:14:56.803113
pkg:github/tats/w3m purl2cpe 2026-06-01 10:14:56.803115
pkg:rpm/fedora/w3m purl2cpe 2026-06-01 10:14:56.803117
pkg:rpm/opensuse/w3m purl2cpe 2026-06-01 10:14:56.803118
pkg:sourceforge/w3m purl2cpe 2026-06-01 10:14:56.803120

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38223 vulnerable 2026-06-08 05:47:16.052004 Details available
There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.
Published: 2022-08-15T00:00:00.000Z
Updated: 2025-11-04T18:14:23.129Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.