CVE-2021-26948

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p56

Published

Mar 3, 2022 (Mar 3, 2022)

Modified

Jun 17, 2026

Description

Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.

Vendors: htmldoc project
Products: htmldoc
Weakness: CWE-479, CWE-476
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.