GCVE - cpe:2.3:a:man2html_project:man2html:1.6g:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:man2html_project:man2html:1.6g:*:*:*:*:*:*:*

part: a version: 1.6g update: *

Vendor	Man2Html Project (`afe50f9c-2513-583f-a7f8-fd025b64bfa9`)
Product	Man2Html (`bb88efca-19bc-52c3-acd3-db80a31504fc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-40648`	vulnerable	2026-06-08 05:35:18.852676	Details available In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, fd_nextsize, bk_nextsize of the current chunk. The next chunk is then freed later on, causing a freeing of an arbitrary amount of memory. Published: 2022-09-09T17:57:38.000Z Updated: 2024-08-04T02:51:06.318Z Open on db.gcve.eu Reference links https://gist.github.com/untaman/cb58123fe89fc65e3984165db5d40933	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40647`	vulnerable	2026-06-08 05:35:18.852185	Details available In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In version before GLIBC version 2.29 and aligned correctly, it allows arbitrary write anywhere in the programs memory. Published: 2022-09-09T17:57:28.000Z Updated: 2024-08-04T02:51:06.370Z Open on db.gcve.eu Reference links https://gist.github.com/untaman/cb58123fe89fc65e3984165db5d40933	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.