Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:w3m:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductW3M (108b5b19-edd0-5f99-b7d1-1604486fb7ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4255 vulnerable 2026-06-08 06:16:11.932481 W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)
MEDIUM (5.5)
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.
Published: 2023-12-21T16:08:39.691Z
Updated: 2025-02-13T17:09:26.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38253 vulnerable 2026-06-08 06:08:17.476356 W3m: out of bounds read in growbuf_to_str() at w3m/indep.c
MEDIUM (4.7)
An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.
Published: 2023-07-14T17:07:01.468Z
Updated: 2025-02-13T17:01:49.231Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.