CVE-2021-40648: MAN2HTML Project MAN2HTML

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, fd_nextsize, bk_nextsize of the current chunk. The next chunk is then freed later on, causing a freeing of an arbitrary amount of memory.

Affected products

• MAN2HTML Project MAN2HTML: version 1.6g only

Published 2022-09-09. Last modified 2026-06-17.