CVE-2023-38252Medium· 4.7▾ SunlitAn out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.
w3mRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2022-2127Medium· 5.9Samba: out-of-bounds read in winbind auth_crap
CVE-2026-120830High· 7.4Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure
CVE-2026-115456Low· 3.7Gcc: out-of-bounds read in std::from_chars
CVE-2026-120740Low· 2.0Hivex: hivex: denial of service via out-of-bounds read in big-data block processing
CVE-2026-118475Low· 3.6Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk
CVE-2026-112922Low· 3.3Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading