Vulnerabilities > CVE-2022-24191 - Infinite Loop vulnerability in multiple products

Summary

In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow.

Vulnerable Configurations

Common Weakness Enumeration (CWE)

• CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

References