{"id":"CVE-2022-34035","details":"HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.","modified":"2026-08-18T14:36:38.761177Z","published":"2022-07-18T20:14:20Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34035.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34035.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34035"},{"type":"REPORT","url":"https://github.com/michaelrsweet/htmldoc/issues/426"},{"type":"FIX","url":"https://github.com/michaelrsweet/htmldoc/commit/a0014be47d614220db111b360fb6170ef6f3937e"},{"type":"FIX","url":"https://github.com/michaelrsweet/htmldoc/commit/ee778252faebb721afba5a081dd6ad7eaf20eef3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/michaelrsweet/htmldoc","events":[{"introduced":"0"},{"fixed":"a0014be47d614220db111b360fb6170ef6f3937e"},{"fixed":"ee778252faebb721afba5a081dd6ad7eaf20eef3"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"1.9.12"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:htmldoc_project:htmldoc:*:*:*:*:*:*:*:*"}}],"versions":["v1.9.11","v1.9.10","v1.9.9","v1.9.8","v1.9.7","v1.9.6","v1.9.5","v1.9.4","v1.9.3","v1.9.2","v1.9.1","v1.9","v1.8.30"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-34035.json","vanir_signatures_modified":"2026-08-18T14:36:38Z","vanir_signatures":[{"digest":{"line_hashes":["11010690573073373580475564536898215144","236316283598532968317843142618347846715","145973939134357512795454432063857196233","138927736457626378013633625171807371122"],"threshold":0.9},"id":"CVE-2022-34035-0c439e4a","signature_type":"Line","signature_version":"v1","source":"https://github.com/michaelrsweet/htmldoc/commit/ee778252faebb721afba5a081dd6ad7eaf20eef3","target":{"file":"htmldoc/htmlsep.cxx"},"deprecated":false},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["234785802684792096917207989401605288278","107672797784367060433788604832715650575","126775171584662616747868599505292290663","141977703225416445065225212901493540205","138808994154111565723513260536960505260","158664751007983522563107000516190651111","245598300303168395589188424596280455781","114467633332899921658977922439920740892","64780672789368538494132268719342144961","202423935383213673756913408541880303964","160910629128377498137551931738960734278","113945988469408376540251915538173454550","127316884730954973287442813256628260259","121593319098276441906138329850905266813","277240015104719155192838511861601358151","84569678992013683809641059764502864028"]},"id":"CVE-2022-34035-1fbddf92","signature_type":"Line","signature_version":"v1","source":"https://github.com/michaelrsweet/htmldoc/commit/a0014be47d614220db111b360fb6170ef6f3937e","target":{"file":"htmldoc/htmllib.cxx"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/michaelrsweet/htmldoc/commit/ee778252faebb721afba5a081dd6ad7eaf20eef3","target":{"file":"htmldoc/htmllib.cxx"},"deprecated":false,"digest":{"line_hashes":["155638652250477494028280661954510983649","305128306086874322804277267068834369421","239540685006073603459403639881075305181","138927736457626378013633625171807371122"],"threshold":0.9},"id":"CVE-2022-34035-70f8acc3"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/michaelrsweet/htmldoc/commit/ee778252faebb721afba5a081dd6ad7eaf20eef3","target":{"file":"htmldoc/html.cxx"},"deprecated":false,"digest":{"line_hashes":["281283668154379978146099682993417865941","11010690573073373580475564536898215144","236316283598532968317843142618347846715","145973939134357512795454432063857196233","138927736457626378013633625171807371122"],"threshold":0.9},"id":"CVE-2022-34035-77d4de2d"},{"target":{"file":"htmldoc/htmlsep.cxx","function":"write_node"},"deprecated":false,"digest":{"function_hash":"175863848132261062858669516373905615154","length":3580},"id":"CVE-2022-34035-7e1e90f6","signature_type":"Function","signature_version":"v1","source":"https://github.com/michaelrsweet/htmldoc/commit/ee778252faebb721afba5a081dd6ad7eaf20eef3"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/michaelrsweet/htmldoc/commit/a0014be47d614220db111b360fb6170ef6f3937e","target":{"file":"htmldoc/testhtml.cxx"},"deprecated":false,"digest":{"line_hashes":["262806988648920606190884753042407998572","242810262689368385328692602182116265446","312538155704082972608823509445976074895","278788631131752346286035340557475704262","190177450537050358124259763931810504927","20478792993146418444206333529513627782","102043806513715176829813927614663154016","124765032087851127907750529542039045826","62241978059388003535691878735061670763","27784967264506964768214472104567925846"],"threshold":0.9},"id":"CVE-2022-34035-af65db43"},{"deprecated":false,"digest":{"function_hash":"139865939855947168328976917133857666007","length":3595},"id":"CVE-2022-34035-b914cac3","signature_type":"Function","signature_version":"v1","source":"https://github.com/michaelrsweet/htmldoc/commit/ee778252faebb721afba5a081dd6ad7eaf20eef3","target":{"function":"write_node","file":"htmldoc/html.cxx"}},{"id":"CVE-2022-34035-ccd1aa28","signature_type":"Function","signature_version":"v1","source":"https://github.com/michaelrsweet/htmldoc/commit/a0014be47d614220db111b360fb6170ef6f3937e","target":{"file":"htmldoc/testhtml.cxx","function":"show_tree"},"deprecated":false,"digest":{"function_hash":"278557957529530301282223491898702162415","length":339}},{"target":{"file":"htmldoc/htmllib.cxx","function":"write_file"},"deprecated":false,"digest":{"function_hash":"34742748971672615881901812179954426979","length":3185},"id":"CVE-2022-34035-d8b5c8c6","signature_type":"Function","signature_version":"v1","source":"https://github.com/michaelrsweet/htmldoc/commit/ee778252faebb721afba5a081dd6ad7eaf20eef3"},{"deprecated":false,"digest":{"function_hash":"76173524937074759609021912018594316081","length":677},"id":"CVE-2022-34035-dba96d92","signature_type":"Function","signature_version":"v1","source":"https://github.com/michaelrsweet/htmldoc/commit/a0014be47d614220db111b360fb6170ef6f3937e","target":{"file":"htmldoc/htmllib.cxx","function":"htmlGetText"}}]}}],"schema_version":"1.9.0"}