CVE-2021-40648
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-40648
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-40648.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-40648
- Downstream
- Published
- 2022-09-09T18:15:09Z
- Modified
- 2025-08-09T19:01:28Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, fdnextsize, bknextsize of the current chunk. The next chunk is then freed later on, causing a freeing of an arbitrary amount of memory.
- References