CVE-2017-1000211: Lynx Project Lynx

Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself.

Affected products

• Lynx Project Lynx: version 2.8.9 only

Published 2017-11-17. Last modified 2026-06-17.