CVE-2022-23850: EPUB2TXT Project EPUB2TXT

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document.

Affected products

• EPUB2TXT Project EPUB2TXT: up to and including 2.02

Published 2022-01-23. Last modified 2026-06-17.