CVE-2023-38253: Fedoraproject Extra Packages For Enterprise Linux

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.

Affected products

• Fedoraproject Extra Packages For Enterprise Linux: version 8.0 only
• Fedoraproject Fedora: version 38 only
• Red Hat Enterprise Linux: version 6.0 only
• Tats w3m: version 0.5.3+git20230121 only

Published 2023-07-14. Last modified 2026-06-17.