CVEDB API

xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.8%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.8

References

Products affected by CVE-2022-23850

Epub2txt Project » Epub2txt » Version: 0.0.1

cpe:2.3:a:epub2txt_project:epub2txt:0.0.1
Epub2txt Project » Epub2txt » Version: 0.1.1

cpe:2.3:a:epub2txt_project:epub2txt:0.1.1
Epub2txt Project » Epub2txt » Version: 0.1.2

cpe:2.3:a:epub2txt_project:epub2txt:0.1.2
Epub2txt Project » Epub2txt » Version: 0.1.3

cpe:2.3:a:epub2txt_project:epub2txt:0.1.3
Epub2txt Project » Epub2txt » Version: 0.1.4

cpe:2.3:a:epub2txt_project:epub2txt:0.1.4
Epub2txt Project » Epub2txt » Version: 0.1.5

cpe:2.3:a:epub2txt_project:epub2txt:0.1.5
Epub2txt Project » Epub2txt » Version: 2.0

cpe:2.3:a:epub2txt_project:epub2txt:2.0
Epub2txt Project » Epub2txt » Version: 2.01

cpe:2.3:a:epub2txt_project:epub2txt:2.01
Epub2txt Project » Epub2txt » Version: 2.02

cpe:2.3:a:epub2txt_project:epub2txt:2.02