Signal Handler Use of a Non-reentrant Function
CVE-2021-26948
Summary
Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.
- LOW
- LOCAL
- HIGH
- UNCHANGED
- REQUIRED
- NONE
- HIGH
- HIGH
CWE-479 - Signal Handler Use of a Non-reentrant Function
The program defines a signal handler that calls a non-reentrant function.
References
Advisory Timeline
- Published