Security update for htmldoc
A security update for htmldoc addresses multiple issues including a critical buffer overflow vulnerability (CVE-2024-46478) in the parse_pre function when handling tabs. The update also fixes various regressions and bugs across versions 1.9.19 through 1.9.23, improving stability and functionality. The buffer overflow flaw could potentially allow memory corruption. No CVSS score is provided, but the severity is marked critical.
AI Analysis
Technical Summary
The update for htmldoc fixes CVE-2024-46478, a buffer overflow vulnerability triggered by handling tabs in the parse_pre function. This flaw could lead to memory corruption or crashes. Additionally, the update includes multiple fixes and improvements from versions 1.9.19 to 1.9.23, such as resolving regressions in list handling, table of contents rendering, HTTP/HTTPS support, markdown parsing, and link resolution. These changes enhance the overall reliability and security of the software.
Potential Impact
The buffer overflow vulnerability (CVE-2024-46478) in htmldoc can cause memory corruption, which may lead to application crashes or potentially allow an attacker to execute arbitrary code. Other fixed regressions and bugs improve the stability and correctness of document processing but do not directly indicate further security impacts.
Mitigation Recommendations
A security update is available that fixes the buffer overflow vulnerability and other issues. Users should upgrade to the fixed versions of htmldoc (at least version 1.9.23) to mitigate these vulnerabilities. No indication is given that additional mitigations are required beyond applying the update.
Security update for htmldoc
Description
A security update for htmldoc addresses multiple issues including a critical buffer overflow vulnerability (CVE-2024-46478) in the parse_pre function when handling tabs. The update also fixes various regressions and bugs across versions 1.9.19 through 1.9.23, improving stability and functionality. The buffer overflow flaw could potentially allow memory corruption. No CVSS score is provided, but the severity is marked critical.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The update for htmldoc fixes CVE-2024-46478, a buffer overflow vulnerability triggered by handling tabs in the parse_pre function. This flaw could lead to memory corruption or crashes. Additionally, the update includes multiple fixes and improvements from versions 1.9.19 to 1.9.23, such as resolving regressions in list handling, table of contents rendering, HTTP/HTTPS support, markdown parsing, and link resolution. These changes enhance the overall reliability and security of the software.
Potential Impact
The buffer overflow vulnerability (CVE-2024-46478) in htmldoc can cause memory corruption, which may lead to application crashes or potentially allow an attacker to execute arbitrary code. Other fixed regressions and bugs improve the stability and correctness of document processing but do not directly indicate further security impacts.
Mitigation Recommendations
A security update is available that fixes the buffer overflow vulnerability and other issues. Users should upgrade to the fixed versions of htmldoc (at least version 1.9.23) to mitigate these vulnerabilities. No indication is given that additional mitigations are required beyond applying the update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:20219-1
- Cve Count
- 2
- Additional Cves
- ["CVE-2024-46478"]
- State
- PUBLISHED
Threat ID: 6aab499655bf5e2cf5990f62
Added to database: 09/17/2026, 01:59:50 UTC
Last enriched: 09/17/2026, 02:33:26 UTC
Last updated: 09/17/2026, 02:33:26 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.